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^ (57) Abstract: An encryption arrangement for multiple encryption of television programs. A system according to embodiments 
£5 of the present invention multiple encrypts only a portion of the data required for full presentation of a television program to permit 

multiple manufacturer's set-top boxes (36 and 136) within a single system. In one embodiment, only critical packets such as those 
^ carrying a payload incorporating packetized elementary stream header information is encrypted. By only encrypting a portion of the 

program, dramatically less bandwidth is consumed than the alternative of multiple encryption of all program data, thus permitting a 
^ larger number of multiple conditional access systems in a single cable television system. 
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CRITICAL PACKET PARTIAL ENCRYPTION 

CROSS REFERENCE TO RELATED DOCUMENTS 

This application is related to U.S. provisional patent application serial 
number 60/296,673 filed June 6, 2001 to Candelore, et al. entitled "Method for 
Allowing Multiple CA Providers to Interoperate in a Content Delivery System by 
Sending Video in the Clear for Some Content, and Dual Carriage of Audio and Dual 

■ 

Carriage of Video and Audio for Other Content", and provisional patent application 
serial number 60/304,241 filed July 10, 2001 to Unger et al., entitled "Independent 
Selective Encryptions of Program Content for Dual Carriage", and provisional patent 
application serial number 60/304,131 filed July 10, 2001 to Candelore et al., 
entitled "Method for Allowing Multiple CA Providers to Interoperate in a Content 
Delivery System by Partial Scrambling Content on a Time Slice Basis" and to U.S. 

provisional patent application serial no. 60/ , filed on October 26, 2001 

to Candelore et al., entitled "Television Encryption Systems", docket number SIMY- 
R4646P, which are hereby incorporated herein by reference. 

This application is being filed simultaneously with patent applications 
docket number SNY-R4646.02 entitled "Time Division Partial Encryption" to 

Candelore et al., serial number ; docket number SNY-R4646.03 

entitled "Elementary Stream Partial Encryption" to Candelore , serial number 

; docket number SNY-R4646.04 entitled "Partial Encryption and 

PID Mapping" to Unger et al., serial number _j and docket 

number SNY-R4646.05 entitled "Decoding and Decrypting of Partially Encrypted 
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Information" to Unger et aL, serial number ' These simultaneously 

filed patent applications are hereby incorporated by reference herein. 

COPYRIGHT NOTICE 

. A portion of the disclosure of this patent document contains material which 
is subject to copyright protection. The copyright owner has no objection to the 
facsimile reproduction of the patent document or the patent disclosure, as it 
appears in the Patent and Trademark Office patent file or records, but otherwise 
reserves all copyright rights whatsoever. 

FIELD OF THE INVENTION 

This invention relates generally to the field of encryption systems. More 
particularly, this invention relates to systems, methods and apparatus for providing 
partial encryption and decryption of digital of television signals. 

BACKGROUND OF THE INVENTION 

Television is used to deliver entertainment and education to viewers. The 
source material (audio, video, etc.) is multiplexed into a combined signal which is 
then used to modulate a carrier. This carrier is commonly known as a channel. (A 
typical channel can carry one analog program, one or two high definition (HD) 
digital program(s), or several (e.g. nine) standard definition digital programs.) In a 
terrestrial system, these channels correspond to government assigned frequencies 
and are distributed over the air. The program is delivered to a receiver that has a 
tuner that pulls the signal from the air and delivers it to a demodulator, which in turn 
provides video to a display and audio to speakers. In a cable system the 
modulated channels are carried over a cable. There may also be an in-band or out- 
of-band feed of a program guide indicating what programs are available and the 
associated tuning information. The number of cable channels is finite and limited 
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. by equipment/cable bandwidth. Cable distribution systems require a significant 
capital investment and are expensive to upgrade. 

Much of television content is valuable to its producers, therefore copyright 
holders want to control access and restrict copies. Examples of typically protected 
material include feature films, sporting events, and adult programming. Conditional 
access (CA) systems are used to control availability of programming in content 
delivery systems such as cable systems. CA systems come as matched sets - 
one part is integrated into the cable system headend and encrypts premium 
content, the other part provides decryption and is built into the set-top boxes (STB) 
installed in user's homes. Several CA systems are used in the cable industry 
including those provided by NDS (Newport Beach, CA), Motorola (Schaumberg, IL) 
and Scientific Atlanta (Atlanta, GA). This matched set aspect of CA systems has 
the effect that the "legacy 0 vendor is locked in as the supplier of additional STBs. 

• * 

« 

Since the various technologies for conditional access are not mutually compatible 
(and are often proprietary), any new potential supplier is forced to license the 
legacy CA. Thus, the cable operator finds itself unable to acquire newer technology 
or competing technology from other set-top box manufacturers since the technology 
owners are often unwilling to cooperate, or charge reasonable license fees. This 
inflexibility can be especially troublesome when cable companies with disparate 
CA systems are merged. Service providers would like more than one source for 
STBs for any number of reasons. 

Once a cable operator picks an encryption scheme, it is difficult to change 
or upgrade the content encryption scheme without introducing a backward 
compatible decoding device (e.g. set-top box). Providing multiple mode capability 
in new set-top boxes to handle multiple encryption systems can add substantial 
cost to any new set-top box, providing that the technology can be made available 
to the STB vendor to provide the multiple decryption capability. 

The only known current option to avoiding domination by the legacy vendor 
(short of wholesale replacement) is using "full dual carriage 0 . Full dual carriage 
means that transmission is duplicated for each encrypted program - once for each 
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type of CA encryption to be used. To provide full dual carriage, the headend is 
enhanced to provide each form of CA simultaneously. Legacy STBs should not be 
impacted and should continue to perform their function despite any change. 
However, full dual carriage often comes at an unpalatable price because of the 
bandwidth impact, thus reducing the number of unique programs available. 
Generally, the number of premium channels suffers so that the number of options 
available to the viewer are limited and the value that can be provided by the cable 

± 

operator is restricted. 

A conventional cable system arrangement is depicted in FIGURE 1 . In such 
a* system, the cable operator processes audio/video (AA/) content 14 with CA 
technology from manufacturer A (system A) using CA encryption equipment 1 8 
compliant with system A at the cable system -headend 22. The encrypted AA/ 
content along with system information (SI) 26 and program specific information 
(PSI) 27 is multiplexed together and transmitted over the cable system 32 to a 
user's STB 36. STB 36 incorporates decrypting CA equipment from system A 
(manufacturer A) 40 that decrypts the AA/ content. The decrypted AA/ content can 
then be supplied to a television set 44 for viewing by the user. 

In a cable system such as that of FIGURE 1, digital program streams are 
broken into packets for transmission. Packets for each component of a program 
(video, audio, auxiliary data, etc.) are tagged with a packet identifier or PID. These 
packet streams for each component of all programs carried within a channel are 
aggregated into one composite stream. Additional packets are also included to 
provide decryption keys and other overhead information. Otherwise unused 
bandwidth is filled with null packets. Bandwidth budgets are usually adjusted to 
utilize about 95% of the available channel bandwidth. 

Overhead information usually includes guide data describing what programs 
are available and how to locate the associated channels and components. This 
guide data is also known as system information or Sh SI may be delivered to the 
STB in-band (part of the data encoded within a channel) or out-of-band (using a 
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special channel dedicated to the purpose). Electronically delivered SI may be 
partially duplicated in more traditional forms - grids published in newspapers and 
magazines. 

In order for a viewer to have a satisfying television experience, it is generally 
desirable that the viewer have clear access to both audio and video content. Some 
analog cable systems have used various filtering techniques to obscure the video 
to prevent an unauthorized viewer from receiving programming that has not been 
paid for. In such a system, the analog audio is sometimes sent in the clear. In the 
Motorola VideoCipher 2 Plus system used in C-band satellite transmissions, strong 
digital audio encryption is used in conjunction with a relatively weak protection of 
the analog video (using sync inversion). In airline in-flight movie systems, the 
availability of audio only through rental of headphones has been used to provide the 
full audio and video only to paying customers. 

BRIEF DESCRIPTION OF THE DRAWINGS 

The features of the invention believed to be novel are set forth with 
particularity in the appended claims. The invention itself however, both as to 
organization and method of operation, together with objects and advantages 
thereof, may be best understood by reference to the following detailed description 
of the invention, which describes certain exemplary embodiments of the invention, 
taken in conjunction with the accompanying drawings in which: 

FIGURE 1 is a block diagram of a conventional conditional access cable 
system. 

FIGURE 2 is a block diagram of a system consistent with one embodiment 
of the present invention in which dual encrypted audio is transmitted alorig with 
clear video. 

FIGURE 3 is a block diagram of a system consistent with an embodiment 
of the present invention in which portions of programming are dual encrypted 
according to a time slice mechanism. 
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FIGURE 4 is a flow chart of a dual encryption process consistent with certain 
embodiments of the present invention. 

FIGURE 5 is a flow chart of a decryption process consistent with certain 
embodiments of the present invention. 

FIGURE 6 is a block diagram of a system consistent with an embodiment 
of the present invention in which portions of programming are dual encrypted on a 
packet basis. 

FIGURE 7 is a flow chart of a dual encryption process consistent with certain 
embodiments of the present invention. 

FIGURE 8 is a flow chart of a decryption process consistent with certain 
embodiments of the present invention. 

FIGURE 9 is a block diagram of a system consistent with an embodiment 
of the present invention in which system information is encrypted and programming 
is sent in the clear. 

FIGURE 10 is a block diagram of a generic system consistent with various 
embodiments of the present invention. 

FIGURE 11 is a block diagram of a first embodiment of implementation of 
an encryption system consistent with embodiments of the present invention in a 
cable system headend. 

FIGURE 12 is a block diagram of a second embodiment of implementation 
of an encryption system consistent with embodiments of the present invention in 
a cable system headend. 

FIGURE 13 is a flow chart of an overall encryption process used to 
implement certain embodiments of the present invention in a cable system 
headend. 

FIGURE 14 is a block diagram of a first embodiment of a set-top box 
implementation of a decoding system consistent with embodiments of the 
present invention. 

FIGURE 15 is a block diagram of a second embodiment of 
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implementation of a decoding system consistent with embodiments of the 
present invention in a cable system STB. 

FIGURE 16 is a block diagram of a third embodiment of implementation 
of a decoding system consistent with embodiments of the present invention in a 
cable system STB. 

FIGURE 17 illustrates the PID remapping process carried out in one 
embodiment of a set-top box PID re-mapper. 

FIGURE 18 is a block diagram of an exemplary decoder chip that can be 
utilized in a television set-top box consistent with the present invention. 

DETAILED DESCRIPTION OF THE INVENTION 

While this invention is susceptible of embodiment in many different forms, 
there is shown in the drawings and will herein be described in detail specific 
embodiments, with the understanding that the present disclosure is to be 
considered as an example of the principles of the invention and not intended to limit 
the invention to the specific embodiments shown and described. In the description 
below, like reference numerals are used to describe the same, similar or 
corresponding parts in the several views of the drawings. The terms "scramble" 
and "encrypt" and variations thereof are used synonymously herein. Also, the term 
"television program" and similar terms can be interpreted in the normal 
conversational sense, as well as a meaning wherein the term means any segment 
of A/V content that can be displayed on a television set or similar monitor device. 

OVERVIEW 

Modem digital cable networks generally use CA systems that fully encrypt 
digital audio and video to make programming inaccessible except to those who 
have properly subscribed. Such encryption is designed to thwart hackers and non- 
subscribers from receiving programming that has not been paid for. However, as 
cable operators wish to provide their subscribers with set-top boxes from any of 
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several manufacturers, they are frustrated by the need to transmit multiple copies 
of a single program encrypted with multiple encryption technologies compliant with 
the CA systems of each STB manufacturer. 

This need to carry multiple copies of the programming (called "full dual 
carriage") uses up valuable bandwidth that could be used to provide the viewer with 
additional programming content. Certain embodiments of the present invention 
address this problem in which the bandwidth requirements to provide an equivalent 
to multiple.carriage are minimized. The result could be described as "Virtual Dual 
Carriage" since the benefits of full dual carriage are provided without the full 
bandwidth cost. Several embodiments of the present invention are presented . 
herein to accomplish effective partial scrambling. These embodiments vary by the 
criteria used to select the portion to encrypt. The portion selected in turn affects the 
additional bandwidth requirements and the effectiveness of the encryption. It may 
be desirable to use one encryption process or several processes in combination in 
a manner consistent with embodiments of the present invention. 

Certain of the implementations of partial dual encryption described herein 
utilize an additional (secondary) PID for each duplicated component. These 
secondary PIDs are used to tag packets that carry duplicated content with an 
additional encryption method. The PSI is enhanced to convey information about 
the existence these new PIDs in such a way that inserted PIDs are ignored by 
legacy STBs but can be easily extracted by new STBs. 

Some implementations of partial dual encryption involve duplicating only 
certain packets tagged with a given PID. Methods for selecting which packets to 
encrypt are detailed hereinafter. The original (i.e. legacy) PID continues to tag the 
packets encrypted with legacy encryption as well as other packets sent in the clear. 
The new PID is used to tag packets encrypted by the second encryption method. 
Packets with the secondary PID shadow the encrypted packets tagged with the 
primary PID. The packets making up the encrypted pairs can occur in either order 
but, in the preferred implementation, maintain sequence with the clear portion of 
the PID stream. By use of the primary and secondary PIDs, the decoder located 
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in the set-top box can readily determine which packets are to be decrypted using 
the decryption method associated with that set-top box, as will be clear upon 
consideration of the following description. The processes used to manipulate PIDs 
will be described later in greater detail. 

The encryption techniques described herein can be broadly categorized 
(according to one categorization) into three basic variations - encrypting just a 
major portion (i.e. audio), encrypting just the SI, and encrypting just selected 
packets. In general, each of the encryption techniques used in the embodiments 
disclosed herein seek to encrypt portions of the an AN signal or associated 
•information while leaving other portions of the A/V signal in the clear to conserve 
bandwidth. Bandwidth can be conserved because the same clear portion can be 
sent to all varieties of set-top boxes. Various methods are used to select the 
portions of information to be encrypted. By so doing, the various embodiments of 
this invention eliminate the traditional "brute-force" technique of encrypting the 
entire content in one specific scrambling scheme, which predicates the redundant 
use of bandwidth if alternate scrambling schemes are desired. In addition, each 
of the partial dual encryption schemes described herein can be used as a single 
partial encryption scheme without departing from embodiments of the present 
invention. 

The various embodiments of the invention use several processes, alone or 
in combination, to send substantial portions of content in the clear while encrypting 
only a small amount of information required to correctly reproduce the content. 
Therefore the amount of information transmitted that is uniquely encrypted in a 
particular scrambling scheme is a small percentage of the content, as opposed to 
the entire replication of each desired program stream. For purposes of the 
exemplary systems in this document, encryption system A will be considered the 
legacy system throughout. Each of the several encryption techniques described 
above will now be described in detail. 

The various embodiments of the invention allow each participating CA 
system to be operated independently. Each is orthogonal to the other. Key sharing 
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in the headend is not required since each system encrypts its own patents. 
Different key epochs may be used by each CA system. For example, packets 
encrypted with Motorola's proprietary encryption can use fast changing encryption 
keys using the embedded security ASIC, while packets encrypted with NDS' smart 
card based system use slightly slower changing keys. This embodiment works 
equally well for Scientific Atlanta and Motorola legacy encryption. 



ENCRYPTED ELEMENTARY STREAM 

Turning now to FIGURE 2, one embodiment of a system that reduces the 
need for additional bandwidth to provide multiple carriage is illustrated as system 
1 00. In this embodiment, the system takes advantage of the fact that viewing 
television programming without audio is usually undesirable. While there are 
exceptions (e.g., adult programming, some sporting events, etc.), the typical viewer 
is unlikely to accept routine viewing of television programming without being able 
to hear the audio. Thus, at headend 122, the video signal 104 is provided in the 
clear (unencrypted) while the clear audio 106 is provided to multiple CA systems 
for broadcast over the cable network. In the exemplary system 1 00, clear audio 
106 is provided to an encryption system 118 that encrypts audio data using 
encryption system A (encryption system A will be considered the legacy system 
throughout this document). Simultaneously, clear audio 106 is provided to 
encryption system 124 that encrypts the audio data using encryption system B. 
Clear video is then multiplexed along with encrypted audio from 118 (Audio A) and 
encrypted audio from 124 (Audio B), system information 128 and program specific 
information 129. 

After distribution through the cable system 32, the video, system information, 
program specific information, Audio A and Audio B are all delivered to set-top 
boxes 36 and 136. At legacy STB 36, the video is displayed and the encrypted 
audio is decrypted at CA system A 40 for play on television set 44. Similarly, at 
new STB 136, the video is displayed and the encrypted audio is decrypted at CA 
system B 140 for play on television set 144. 

-10- 



WO 03/061289 PCT7US02/40050 

Audio has a relatively low bandwidth requirement compared with a complete 
A/V program (or even just the video portion). The current maximum bit rate for 

« 

stereophonic audio at 384 Kb/second is approximately 1 0% of a 3.8Mb/second 
television program. Thus, for dual carriage of only encrypted audio (with video 
transmitted in the clear) in a system with ten channels carried with 256 QAM 
(quadrature amplitude modulation), a loss of only about one channel worth of 
bandwidth would occur. Therefore, approximately nine channels could be carried. 
This is a dramatic improvement over the need to dual encrypt all channels, which 
would result in a decrease in available channels from ten to five. Where deemed 
necessaryre.gr, sporting events, pay per view, adult programming, etc., dual 
encryption of both audio and video can still be carried out, if desired. 

■ 

Both legacy and new set-top boxes can function in a normal manner 
receiving video in the clear and decrypting the audio in the same manner used for 
fully decrypting encrypted AN content.. If the user has not subscribed to the 
programming encrypted according to the above scheme, at best the user can only 
view the video without an ability to hear the audio. For enhanced security over the 
video, it possible to employ other embodiments of the invention (as will be 
described later) here as well. (For example, the SI may be scrambled to make it 
more difficult for a non-authorized set-top box to tune to the video portion of the 
program.) Unauthorized set-top boxes that have not been modified by a hacker, will 
blank the video as a result of receipt of the encrypted audio. 

Authorized set-top boxes receive Entitlement Control Messages (ECM) that 
are used to get access criteria and descrambling keys. The set-top box attempts 
to apply the keys to video as well as the audio. Since the video is not scrambled, 
it simply passes through the set-top boxes' descrambler unaffected. The set-top 
boxes do not care that the video is in-the-clear. The un-modified and un-subscribed 
set-top boxes behave as being un-authorized for the scrambled audio as well as the 
clear video. The video, as well as the audio which was actually scrambled, will be 
blanked. An on-screen display may appear on the TV stating that the viewer needs 
to subscribe to programming. This desirably totally inhibits the casual viewer from 
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both hearing and viewing the content 

In one embodiment of the present invention, the encrypted audio is 
transmitted as digitized packets over the A/V channel. Two (or more) audio 
streams are transmitted encrypted according to the two (or more) encryption 
systems in use by the system's set-top boxes. In order for the two (or more) STBs 
to properly decrypt and decode their respective audio streams, SI (system 
information) data are transmitted from the cable system's headend 122 that 
identifies the particular channel where the audio can be found using a transmitted 
Service Identifier to locate the audio. This is accomplished by assigning the audio 
for system A is a first packet identifier (PID) and assigning the audio for system B 
a second packet identifier (PID). By way of example, and not limitation, the 
following program specific information (PSI) can be sent to identity the location of 
the audio for two systems, one using NDS conditional access and one using 
Motorola conditional access. Those skilled in the art will understand how to adapt 
this information to the other embodiments of partial encryption described later 
herein. 

The SI can be separately delivered to both legacy and non-legacy set-top 
boxes. It is possible to send SI information so that the legacy and non-legacy set- 
top boxes operate essentially without interference. In the SI delivered to legacy set- 
top boxes, the VCT (virtual channel table) would state that the desired program, e.g. 
HBO referenced as program number 1, is on Service ID "1" and that the VCT 
access control bit is set. The network information table (NIT) delivered to that first 
STB would indicate that Service ID "1" is at frequency = 1234. In the SI delivered 
to non-legacy set-top boxes, the VCT would state that the desired program, e.g. 
HBO referenced as program number 1001, is on Service ID "1001" and that the 
VCT access control bit is set. The network information table delivered to the non- 
legacy STB would indicate that the Service ID u 1001" is at frequency 1234. The 
following exemplary program association Table PSI data are sent to both legacy 
and non-legacy set-top boxes (in MPEG data structure format): 
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PAT sent on PID=0x0000 

PAT 0x0000 

- Transport Stream ID 

- PAT version 

- Program Number 1 

- PMT 0x0010 

- Program Number 2 

- PMT 0x0020 

- Program Number 3 

- PMT 0x0030 

- Program Number 4 

- PMT 0x0040 

- Program Number 5 

- PMT 0x0050 

• Program Number 6 

- PMT 0x0060 

• Program Number 7 

- PMT 0x0070 
Program Number 8 

- PMT 0x0080 
Program Number 9 

- PMT 0x0090 
Program Number 1001 

- PMT 0x1010 
Program Number 1002 

- PMT 0x1 020 
Program Number 1 003 

- PMT 0x1030 
Program Number 1004 

- PMT 0x1040 
Program Number 1005 

- PMT 0x1050 
Program Number 1006 

- PMT 0x1 060 
Program Number 1007 

- PMT 0x1 070 
Program Number 1 008 

- PMT 0x1 080 
Program Number 1009 

- PMT 0x1 090 



The following exemplary program map table PSI data are selectively 
received by legacy and non-legacy set-top boxes (in MPEG data structure format): 
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PMT sent on PID=0x0010 

PMT 0x0010 

- PMT Program number 1 

- PMT Section Version 10 

- PGR PID 0x0011 

- Elementary Stream 

- Stream Type (Video 0x02 or 0x80) 

- Elementary PID (0x0011) 

- Descriptor 

- CA Descriptor (ECM) for CA provider #1 

- Elementary Stream 

- Stream Type (Audio 0x81) 

- Elementary PID (0x0012) 

- Descriptor 

- CA Descriptor (ECM) for CA provider #1 



PMT sent on PID=0x1010 

PMT 0x1010 

- PMT Program number 1 01 0 

- PMT Section Version 10 

- PCR PID 0x0011 

- Elementary Stream 

- Stream Type (Video 0x02 or 0x80) 

- Elementary PID (0x0011) 

- Descriptor 

- CA Descriptor (ECM) for CA provider #2 

- Elementary Stream 

- Stream Type (Audio 0x81) 

- Elementary PID (0x001 3) 

- Descriptor 

- CA Descriptor (ECM) for CA provider #2 



Considering an example wherein it is desired to deliver programming in a 
system using either Motorola or Scientific Atlanta as well as NDS CA, the above 
communications are consistent with the PSI delivered by both Motorola and 
Scientific Atlanta in their CA systems, with only minor changes. The program 
association table (PAT) is changed to reference an additional program map table 
(PMT) for each program. Each program in this embodiment has two program 
numbers in the PAT. In the table above, program number 1 and program number 
1 001 are the same program except that they will reference different audio PIDs and 
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CA descriptors. Changes in the system to create multiple PMTs and to multiplex 
new PAT and PMT information with the data stream can be made to appropriately 
modify the cable system headend equipment. Again, those skilled in the art will 
understand how to adapt these messages to other partial encryption schemes 
described herein. An advantage of this approach is that no special hardware or 
software is required for headend or for legacy and non-legacy set-top boxes to 
deliver audio that is both legacy and non-legacy encrypted using this scheme. 

This technique deters the user from use of premium programming which has 
not been paid for by rendering it inaudible, but a hacker may attempt to tune the 
video. To combat this, the mechanisms employed in other encryption techniques 
consistent with the present invention (as will be described later) can be employed 
simultaneously, if desired. Since closed captioning is generally transmitted as a 
part of the video data, the user can still obtain readable audio information in 

m 

conjunction with clear video. Thus, although adequate for some applications, the 
present technique alone may not provide adequate protection in all scenarios. In 
another embodiment, video packets containing closed captioning information as 
a part of the payload can additionally be scrambled. 

In an alternative embodiment, only the video may be dual encrypted with 
separate PIDs assigned to each set of encrypted video. While this may provide a 
more secure encryption for general programming (since video may be more 
important than audio), the amount of bandwidth savings compared with full dual 
carriage is only approximately ten percent, since only the audio is shared amongst 
all the set-top boxes. However, this approach might be used for certain content, 
e.g. adult and sports, and help reduce the bandwidth overhead for that content 
while the audio encryption approach may be used for other content types. In the 
Digital Satellite Service (DSS) transport standard used for the DirecTV™ service, 
the ardio packets can be identified for encryption by use of the service channel 
identifier (SCID) which is considered equivalent. 
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TIME SLICING 

Another embodiment consistent with the present invention is referred to 
herein as time slicing and is illustrated in FIGURE 3 as system 200. In this 
embodiment, a portion of each program is encrypted on a time dependent basis in 
a manner that disrupts viewing of the program unless the user has paid for the 
programming. This embodiment of the invention can be implemented as partially 
encrypted video and clear audio, clear video and partially encrypted audio or 
partially encrypted video and audio. The duration of the time slice that is encrypted, 
taken as a percentage of the total time, can be selected to meet any suitable 
desired balance of bandwidth usage, security against hackers. In general, under 
any of the embodiments described herein, less than 100 percent of the content is 
encrypted to produce a desired partial encryption. . The following example details 
partially encrypted video and audio. 

By way of example, and not limitation, consider a system which has nine 
programs that are to be dual partially encrypted according to the present exemplary 
embodiment. These nine channels are fed to the cable headend as a multiplexed 
stream of packets and are digitally encoded using packet identifiers (PID) to identify 
packets associated with a particular one of the nine programs. In this example, 
assume that those nine programs have video PIDs numbered 101-109 and audio 
PIDs numbered 201-209. The partial encryption, according to this embodiment is 
time multiplexed among the programs so that only packets from a single program 
are encrypted at any given time. The method does not need to be content aware. 

With reference to TABLE 1 below, an exemplary embodiment of a time slice 
dual encryption scheme consistent with an embodiment of the invention is 
illustrated. For program 1 having primary video PID 1 01 and primary audio PID 201 , 
during the first time period, packets having PID 101 and PID201 are encrypted 
using encryption system A, while the others representing the other programs are 

4 

sent in the clear. In this embodiment, secondary PIDs are also assigned to both 
the video and the audio. The secondary PIDs are PID 1 1 1 for video and PID 21 1 for 
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audio respectively for program 1. The packets with the secondary PIDs are 
encrypted using encryption system B during the first time period. The next eight 
time periods are sent in the clear. Then for time period 10, packets having any of 
the above four PIDs are again encrypted followed by the next eight time periods 
being sent in the clear. In a similar manner, during the second period of program 
2 having primary video PID 102 and primary audio PID 201 are encrypted using 
encryption system A and packets with their associated secondary PIDs are 
encrypted using encryption system B, and during the next eight time periods are 
sent in the clear, and so on. This pattern can be seen clearly in TABLE 1 by 
examination of the first nine rows. Both audio and video packets, or audio 
alone or video alone can be encrypted according to this technique, without 
departing from the invention. Also, the audio and video can have their own 
individual encryption sequence. In TABLE 1, P1 indicates time period number 1, 
P2 indicated time period number 2 and so on. EA indicates that the information is 
encrypted using CA system A and EB indicates that the information is encrypted 
using CA encryption system B. 



17- 



WO 03/061289 



PCT/US02/40050 



PROG. 


■VIDEO PID 


AUDIO PID 


PI 


P2 
• * 


P3 


Pd 


PS 

r w 


PS 


P7 


P8 

I w 


PQ 


Pin 


rl 1 




1 


1 


PID 101 

9 lar ft ft 


PID 201 


EA 


dear 


dear 


dpar 


Hoar 


Hoar 


Hoar 
deal 


r*loar 
wieoi 


Hoar 

cicar 


PA 
CM 


Clear 


/UAA ftP 

dear 




2 


PID 102 


PID 202 


dear 


EA 


dear 
VI ecu 


Hoar 

deal 


Hoor 


Hoar 
deaf 


Hosar 
deaf 


wtecu 


r*loar 

dear 


dear 


CM 


dear 


■ • * 


3 


PID 103 


PID 203 


clear 


dear 


EA 

I—St 


r*loar 
deal 


Hoor 
dear 


Hoor 
Clear 


Hoar 
dear 


dear 


dear 


ciear 


Clear 


CA 
CM 




4 


PID 104 


PID 204 


dear 


dear 


Hoar 
Weal 


CM 


dear 


dear 


dear 


Clear 


Clear 


ciear 


clear 


clear 


• 


5 


PID 105 


PID 205 


dear 

wK£CU 


Hoar 


Hoar 
deal 


dear 


PA 


Clear 


dcaT 


Amor 

clear 


ciear 


dear 


clear 


dear 




6 


PID 106 


PID 206 


clear 


uicai 


Hoar 


Hoar 


Clear 


PA 
CM 


dear 


Clear 


clear 


ciear 


clear 


dear 




, 7 


PID 107 

1 ■ mmW ■ W ft 


PID 207 


dear 

weal 


floor 


Hoar 


deaf 


Clear 


Clear 


PA 
CM 


dear 


clear 


ciear 


dear 


clear 


• • • 


8 


PID 108 


PID 208 


dear 


dear 


Hoar 


Hoar 


Hoor 

Clear 


Clear 


dear 


PA 
CM 


Clear 


ciear 


clear 


clear 


mm* 


9 


PID 109 


PID 209 


dear 


dear 


Hoar 


Hoar 
deal 


Hoar 
Clear 


CtcaT 


dear 


dear 


PA 
CM 


ciear 


dear 


clear 


mm m 


! 1 

• t 


PID 111 

• ifc^ ill 


PID 211 


EB 


















CD 
CD 






mmm 


2 


PID 112 

* 


PID 212 




PR 






• 












CD 
CD 




• • ■ 


3 


PID 113 


PID 213 






EB 


















PR 


« • • 


4 


PID 114 


PID 214 








EB 


















• mm 




PID 115 


PID 215 










EB 




* * 












mm m 


6 


PID 116 


PID 216 












EB 














m 


7 


PID 117 


PID 217 














EB 












*• • 


8 


PID 118 


PID 218 
















EB 












9 


PID 119 


PID 219 


















EB 








• * ■ 



TABLE 1 



In order to retain compatibility with an established legacy encryption system 
(encryption system A), the encrypted periods for each of programs one through 
nine are encrypted using encryption system A. Legacy STB equipment will accept 
such partially encrypted A/V data streams passing unencrypted packets and 
decrypting encrypted packets transparently. However, it is desired to obtain dual 
encryption using both encryption system A and encryption system B, In order to 
achieve this, a specified program is assigned both primary PIDs (e.g., for program 
1, video PID 101 and audio PID 201) and a secondary PID (e.g., for program 1, 
video PID 1 1 1 and audio PID 21 1 ) to carry the elementary data streams for a given 
premium channel. 

With reference to FIGURE 3, system 200 generally depicts the functionality 
of the cable system headend 222 wherein N channels of clear video 204 at the 
headend 222 are provided to an intelligent switch 216 (operating under control of 
a programmed processor) which routes packets that are to be transmitted in the 
clear to be assigned a primary PID at 220. Packets that are to be encrypted are 
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routed to both conditional access system A encrypter 218 and to conditional 
access system B encrypter 224. Once encrypted, these encrypted packets from 
21 8 and 224 are assigned primary or secondary PIDs respectively at 220. System 
information from 228 is multiplexed or combined with the clear packets, the system 
A encrypted packets and the system B encrypted packets and broadcast over the 
cable system 32. 

For discussion purposes, if the period of the time slice is 1 00 milli-seconds, 
then as shown in TABLE 1, there are on average one and a fraction encrypted 

■ 

periods totaling 1 1 1 milli-seconds each second for all nine-programs. If the period 
is 50 milli-seconds, then there are on average two and a fraction encrypted periods 
totaling 1 1 1 milli-seconds. A non-subscribing box attempting to tune video would 
obtain a very poor image if it could maintain any sort of image lock and the audio 
would be garbled. 

The PSI for a partially scrambled stream is handled slightly differently from 
the dual audio encryption example above. Essentially, the same SI and PAT PSI 
information can be sent to both legacy and non-legacy set-top boxes. The 
difference lies with the PMT PSI information. The legacy set-top box parses the 
PMT PSI and obtains the primary video and audio PIDs as before. The non-legacy 
set-top box obtains the primary PIDs like the legacy set-top box but must look at the 
CA descriptors in the PMT PSI to see if the stream is partially scrambled. The 
secondary PID is scrambled specifically for a particular CA provider, consequently 
it makes sense to use the CA descriptor specific to a particular CA provider to 
signal that PID. The invention can allow more than two CA providers to co-exist by 
allowing more than one secondary PID. The secondary PID shall be unique to a 
particular CA provider. The set-top box know the CA ID for the CA it has, and can 
check all CA descriptors for the relevant one for it. 

While it is possible to send the secondary PID data as private data in the 
same CA descriptor used for the ECM, the preferred embodiment uses separate 
CA descriptors. The secondary PID is placed in the CA PID field. This allows 
headend processing equipment to "see" the PID without having to parse the private 
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data field of the CA descriptor. To tell the difference between the ECM and 
secondary PID CA descriptor, a dummy private data value can be sent. 



PMT sent on PID=0x0010 

PMT 0x0010 

- PMT Program number 1 

- PMT Section Version 10 

- PCR PID 0x0011 

- Elementary Stream 

- Stream Type (Video 0x02 or 0x80) 

- Elementary PID (0x0011) 

- Descriptor 

- CA Descriptor (ECM) for CA provider #1 

- CA Descriptor (ECM) for CA provider #2 

- CA Descriptor (Secondary PID) for CA provider #2 

- Elementary Stream 

- Stream Type (Audio 0x81) 

- Elementary PID (0x0012) 

- Descriptor 

- CA Descriptor (ECM) for CA provider #1 

- CA Descriptor (ECM) for CA provider #2 

- CA Descriptor (Secondary PID) for CA provider #2 



CA Descriptor for CA Provider #2 (ECM) 

Descriptor 

- Tag: Conditional Access (0x09) 

- Length: 4 Bytes 

- Data 

- CA System iD: 0x0942 (2 nd CA provider) 

- CA PID (0x0015) 



CA Descriptor for CA Provider #2 (Secondary PID) 

Descriptor 

- Tag: Conditional Access (0x09) 

- Length: 5 Bytes 

- Data 

- CA System ID: 0x1234 (2 nd CA provider) 

- CA PID (0x0016) 

- Private Data 



• 
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Legacy STB 36 operating under CA system A receives the data, ignores 
the secondary PIDs, decrypts the packets encrypted under CA system A and 
presents the program to the television set 44. New or non-legacy STB 236 
receives the SI 228. It receives PSI 229 and uses the PMT to identify the 
primary and secondary PID, called out in the second CA descriptor, associated 
with the program being viewed. The packets encrypted under CA system A are 
discarded and the packets encrypted under CA system B with the secondary 
PID are decrypted by CA system B 240 and inserted into the clear data stream 
for decoding and display on television set 244. 

FIGURE 4 illustrates one process for encoding at the cable system headend 
that can be used to implement an embodiment of the present invention wherein CA 
system A is the legacy system and CA system B is the new system to be 
introduced. As a clear packet is received, at 250 for a given program, if the packet 
(or frame) is not to be encrypted (i.e., it is not the current time slice for encryption 
for this program), the clear packet (C) is passed on to be inserted into the output 
stream at 254. If the current packet is to be encrypted by virtue of the current 
packet being a part of the encryption time slice, the packet is passed for encryption 
to both packet encryption process A 258 and packet encryption process B 262. 
The encrypted packets from encryption process A at 258 (EA) are passed on to 254 
for insertion into the output stream. The encrypted packets from encryption 
process B at 262 (EB) are assigned a secondary PID at 264 for insertion into the 
output stream at 254. This is repeated for all packets in the program.. 

FIGURE 5 illustrates a process used in the STB 236 having the newly 
introduced CA system B for decrypting and decoding the received data stream 
containing C, EA and EB packets having primary and secondary PIDs as 
described. When a packet is received at 272, it is inspected to see if it has a the 
primary PID of interest. If not, the packet is examined to see if it has the secondary 
PID of interest at 274. If the packet has neither the primary or secondary PID, it is 
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ignored or dropped at 278. Any intervening packets between the EA and EB 
packets that are not the primary or secondary PID are discarded. It is an 
implementation and mainly a buffering issue whether a decoder can receive 
multiple EA or EB in a row before receiving the replacement matched EA or EB 
packet. Also, just as easy to detect for secondary packets that come before and 
not after the primary packet. It is also possible to design a circuit where either 
case can happen - the secondary packet can before or after the primary packet. 
If the packet has the primary PID of interest, the packet is examined at 284 to 
determine if it is encrypted. If not, the packet (C) is passed directly to the decoder 
at 288 for decoding. If the packet is encrypted at 284, it is deemed to be an EA 
packet and is dropped or ignored at 278. In some implementations, the primary 
packers encryption does not get checked at 284. Rather, its simple position 
relative to the secondary packet can be checked at 284 to identify it for 
replacement. 

If the packet has the secondary PID at 274, the PID is remapped to the 
primary PID at 292 (or equivalently, the primary PID is remapped to the secondary 
PiD value). The packet is then decrypted at 296 and sent to the packet decoder at 
288 for decoding. Of course, those skilled in the art will recognize that many 
variations are possible without departing from the invention, for example, the order 
of 292 and 296 or the order of 272 and 274 can be reversed. As mentioned earlier, 
284 can be replaced with a check of primary packet position with respect to the 
secondary packet. Other variations will occur to those skilled in the art. 

Legacy STB 36 operating under the encryption system A totally ignores the 
secondary PID packets. Packets with the primary PID are decrypted, if necessary, 
and passed to the decoder without decryption if they are clear packets. Thus, a so 
called "legacy" STB operating under encryption system A will properly decrypt and 
decode the partially encrypted data stream associated with the primary PID and 
ignore the secondary PID without modification. STBs operating under the 
encryption system B are programmed to ignore all encrypted packets associated 
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with the primary PID and to use the encrypted packets transmitted with the 
secondary PID associated with a particular channel. 

Thus, each dual partially encrypted program has two sets of PIDs associated 
therewith. If, as described, the encryption is carried out on a period-by-period 
basis, for the system shown with an appropriate time slice interval, the picture will 
be essentially unviewable on a STB with neither decryption. 

In order to implement this system in the headend 322 of FIGURE 6, the SI 
and PSI can be modified for inclusion of a second set of CA descriptor information. 
Legacy set-top boxes may not be able to tolerate unknown CA descriptors. 
Consequently, alternatively, in the set-top box, it may be possible to "hard code" 
offsets from the legacy CA PIDs for both the content PIDs and/or the SI/PSI and 
ECM PIDs. Alternatively, -parallel PSI may be sent For example, an auxiliary PAT 
can be delivered on PID 1 000 instead of PID 0 for the non-legacy set-top boxes. It 
can reference auxiliary PMTs not found in the legacy PAT. The auxiliary PMTs can 
contain the non-legacy CA descriptors. Since auxiliary PMTs would not be known 
to the legacy set-top boxes, there would not be any interoperation issue. 

In systems where system A corresponds to legacy set-top boxes 
manufactured by Motorola or Scientific Atlanta, no modifications to the STBs are 
required. For the system B compliant STBs, for dual carriage of partially encrypted 
programs as described herein, the video and audio decoder are adapted to listen 
to two PIDs each (a primary and a secondary PID) instead of just one. There may 
be one or more secondary shadow PIDs, depending on the number of non-legacy 
CA systems in use, however a specific set-top box only listens to one of the 
secondary PIDs as appropriate for the CA method being used by that specific STB. 
In addition, ideally the encrypted packets from the PID carrying the mostly clear 
video or audio are ignored. Since ignoring "bad packets" (those that cannot be 
readily decoded as is) may already be a function that many decoders perform, thus 
requiring no modification. For systems with decoders that do not ignore bad 
packets, a filtering function can be used. It should be understood that the time 
slice encryption technique could be applied to just the video or the audio. Also, the 
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video may be time slice encrypted while the audio is dual encrypted as in the 
earlier embodiment. The time slice technique may be applied to multiple programs 
concurrently. The number of programs that encrypted during a period of time is 
mainly an issue of bandwidth allocation, and although the example discusses 
scrambling a single program at a time, the invention is not limited by that. Other 
combinations of encryption techniques described in this document will also occur 
to those skilled in the art. 

M™ AND N PACKET ENCRYPTION 

Another embodiment consistent with the present invention is referred to 
herein as M ,h & N packet encryption. This is a variation of the embodiment 
illustrated in FIGURE 3 as system 200. In this embodiment, packets of each PID 
representing a program are encrypted in a manner that disrupts viewing of the 
program unless the user has paid for the programming. In this embodiment, M 
represents the number of packets between the start of an encryption event. N 
represents the number of packets that are encrypted in a row, once encryption 
takes place. N is less than M. If M=9 and N=1 , then every nine packets there is an 
encryption event lasting 1 packet. If M=16 and N=2, then every sixteen packets 
there is an encryption event lasting two packets. Each packet to be dual partially 
encrypted is duplicated and processed using CA system A 218 and CA system B 
224 as in the previous embodiment. The difference in operation between this 
embodiment and the time slicing technique previously is in the operation of switch 
21 6 to effect the selection of packets to encrypt under control of a programmed 
processor. 

By way of example, and not limitation, consider a system which has nine 
channels of programming that are to be dual encrypted according to the present 
exemplary embodiment. These nine channels are digitally encoded using packet 
identifiers (PID) to identify packets associated with a particular one of nine 
programs. In this example, assume that those nine programs have video PIDs 
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numbered 101-1 09 and audio PIDs numbered 201-209. The encryption, according 
to this embodiment is random program-to-program so that packets from other 
programs may be encrypted at the same time. This is illustrated in TABLE 2 below 
in which M=6 and N=2 and in which only video is encrypted, but this should not be 
considered limiting. The method does not need to be content aware. In TABLE 2, 
PK1 indicated packet number 1 , PK2 indicates packet number 2, and so on. 
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TABLE 2 



In the example of TABLE 2 f each program is encrypted fully independently 
of the others using the M=6 and N=2 encryption scheme. Again, the illustrated 
example encrypts only the video, but audio could also be encrypted according to 



-25- 



WO 03/061289 



PCT/US02/40050 



this of another arrangement. If applied to just the video, audio may be dual 
scrambled or time slice encrypted as in earlier embodiments. Alternatively, if 
applied to just the audio, the video may be time sliced as in the earlier 
embodiment. 

Those skilled in the art will recognize that many variations of the technique 
can be devised consistent with the partial scrambling concepts disclosed herein. 
For example, a pattern of five clear followed by two encrypted followed by two clear 
followed by one encrypted (CCCCCEECCECCCCCEECCE...) is consistent with 
variations of the present partial encryption concept, as are random, pseudo-random 
and semi-random values for M and N may be used for selection of packets to 
encrypt. Random, pseudo-random or semi-random (herein collectively referred to 
as "random* herein) selection of packets can make it difficult for a hacker to 
algorithmically reconstruct packets in a post processing attempt to recover 
recorded scrambled content Those skilled in the art will understand how to adapt 
this information to the other embodiments of partial encryption described later 
herein. Some of the embodiments can be used in combination to more effectively 
secure the content. 

DATA STRUCTURE ENCRYPTION 

Another partial encryption method consistent with embodiments of the 
present invention uses a data structure as a basis for encryption. By way of 
example and not limitation, one convenient data structure to use for encryption is 
an MPEG video frame. This is illustrated (again with video only) in TABLE 3 below 
in which every tenth video frame is encrypted. In this embodiment, each program's 
ten frame encryption cycle is distinct from each other channel, but this should not 
be considered limiting. This concept can be viewed as a variation of the time slice 
or M to and N partial encryption arrangement (or other pattern) based upon video or 
audio frames (or some other data structure) with the exemplary embodiment having 
M=10 and N=1. Of course, other values of M and N can be used in a similar 
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embodiment. In TABLE 3, F1 represents frame number 1, F2 represents frame 
number 2 and so on. - 
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TABLE 3 



Thus, again each encrypted program has two sets of PIDs associated 
therewith. If, as described, the encryption is carried out on a period-by-period 
basis, for the system shown, the picture will be essentially unviewable. For a nine 
program system at 30 frames per second as depicted, approximately three frames 
per second will be encrypted. For viewers who are not entitled to view the program, 
their STB will be unable to capture much more than an occasional frozen frame as 
the STB constantly attempts to synchronize and recover. Viewers who have 
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subscribed to the programming will be able to readily view the programming. The 
bandwidth cost for such an encryption arrangement depends upon the frequency 
with which the encryption is applied. In the above example, an extra factor of 1/9 
of data are transmitted for each program. In this example, approximately one 
program's worth of bandwidth is used. With a greater number of programs, fewer 
packets per program are encrypted and the security of the encryption system may 
degrade somewhat. As in the randomized M and N method, random frames may 
be selected. Choosing random frames, in the video case, would help guarantee 
that all frame types would be affected - intra-coded frames (I frames), predictive- 
coded (P frames), Bi-directional-coded (B frames) and DC frames. 

In a variation of the invention, it may be possible to encrypt fewer packets to 
achieve an acceptable level of security. That is, perhaps in a system of nine 
programs, only one frame per second may need to be encrypted to achieve 
acceptable levels of security. In such a system, the overhead becomes one 
encrypted period per second per program or approximately 1/30 of data transmitted 
in overhead. This level of overhead is a dramatic improvement over the 50% loss 
of bandwidth associated with full dual carriage of encryption under two encryption 
systems. In another variation of the invention, it may be possible to encrypt only 
certain video frames to achieve an acceptable level of security. For example, for 
MPEG content, only intra-coded frames (I frames) may be scrambled to further 
reduce the bandwidth overhead and still maintain an acceptable level of security. 
These offer significant improvement over the bandwidth required for full dual 
carriage. 

CRITICAL PACKET ENCRYPTION 

Substantial efficiency in bandwidth utilization can be achieved by use of a 
selective packet-by-packet dual encryption technique. In this technique, packets 
are selected for encryption based upon their importance to the proper decoding of 
the audio and/or video of the program content. 
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This embodiment can reduce the bandwidth requirement compared with full 
dual carriage of encrypted content by only scrambling a small fraction of the 
packets. Clear packets are shared between the two (or more) dual carriage PIDs. 
In one preferred embodiment, as will be disclosed, less that about one percent of 
the total content bandwidth is used. In a system with a legacy encryption scheme, 
clear program content packets can be received by both legacy and new set-top 
boxes. As mentioned before, encrypted packets are dual carried and processed 
by the respective set-top boxes with the appropriate CA. Each CA system is 
orthogonal. Key sharing is not required and different key epochs may be used by 
each CA system. For example, a system with Motorola's proprietary encryption can 
generate fast changing encryption keys using the embedded security ASIC, while 
an NDS smart card based system can generate slightly slower changing keys. 
This embodiment works equally well for Scientific Atlanta and Motorola legacy 

■ 

encryption. 

Referring now to FIGURE 6, a block diagram of a system consistent with an 
embodiment of the present invention in which portions of programming are dual 
encrypted on a packet-by-packet basis is illustrated as system 300. In this system, 
packets of each program are dual encrypted using, for example, legacy CA system 
A and CA system B. The packets that are encrypted are selected based upon their 
importance to the proper decoding of the video and/or audio stream. 

In the system illustrated in FIGURE 6, the cable system headend 322 
selects AA/ content 304 packets at a packet selector 316 for encryption. Packets 
selected for encryption are chosen so that their non-receipt (by a non-paying 
decoder) would severely affect the real-time decoding of a program, and any 
possible post processing of recorded content. That is, only critical packets are 
encrypted. For the video and audio, this can be accomplished by encrypting "start 
of frame" transport stream packets containing PES (packetized elementary stream) 
headers and other headers as part of the payload, since without this information, 
the STB decoder cannot decompress the MPEG compressed data. MPEG2 
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streams identify "start of frame 0 packets with the "Packet Unit Start Indicator in the 
transport header. Generally, packets carrying a payload that contains a group of 
pictures header or a video sequence header can be used to effect the present 
scrambling technique. 

MPEG (Moving Pictures Expert Group) compliant compressed video 
repackages the elementary data stream into the transport stream in somewhat 
arbitrary payloads of 1 88 bytes of data. As such, the transport stream packets 
containing a PES header can be selected for encryption at selector 316 and dual 
encrypted by both the CA system A encrypter 318 and the CA system B encrypter 
324. Packets to be dual partially encrypted are duplicated and the PIDs of 
duplicate packets encrypted by encrypter 324 are remapped at 330 to a secondary 
PID as in the previous embodiment. The remaining packets are passed in the 
clear. The clear packets, system A encrypted packets, system B encrypted 
packets and system information 328 are multiplexed together for broadcast over the 
cable system 32. 

As with the previous system, the legacy STB 36 receives clear data and data 
encrypted under CA encryption system A and transparently passes unencrypted * 
data combined with data decrypted by CA decryption A 40 to its decoder. In the 
new STB 336, the program is assigned to both a primary and a secondary PID. 
The clear packets with the primary PID are received and passed to the decoder. 
The encrypted packets with the primary PID are discarded. Encrypted packets with 
the secondary PID are decrypted and then recombined with the data stream (e.g., 
by remapping the packets to the primary PID) for decoding. 

Using video is used as an example, each sample is known as a frame and 
the sample rate is typically 30 frames per second. If the samples are encoded to 
fit into 3.8 Mbps, each frame would occupy 127K bits of bandwidth. This data is 
sliced for MPEG transport into packets of 188 bytes with the first packet(s) of each 
frame containing the header used for instructions to process the body of the frame 
data. Dual encrypting just the first header packet (1504 additional bits) requires 
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only 1.2% (1 504/1 27K) of additional bandwidth. For high definition (19 Mbps) 
streams the percentage is even-less. 

As previously stated, transport stream packets containing a PES header are 
the preferred target for encryption according to the present embodiment. These 
packets contain sequence headers, sequence extension headers, picture headers, 
quantization and other decode tables that also fall within the same packet. If these 
packets cannot be decoded (i.e., by a hacker attempting to view unauthorized 
programming without paying the subscription charges), not even small portions of 
the program can be viewed. In general, any attempt to tune to the program will 
likely be met with a blank screen and no audio whatsoever since known decoder 
integrated circuits use the PES header to sync up to an elementary stream such 
as video and audio in real-time. By encrypting the PES header, the decoding 
engine in an un-authorized set-top box cannot even get started. Post processing 
attacks, e.g. on stored content, are thwarted by critical dynamically changing 
information in the packet containing the PES header. Those skilled in the art will 
appreciate that for implementation of this embodiment of the invention, other critical 
or important packets or content elements may also be identified for encryption that 
could severely inhibit unauthorized viewing without departing from the present 
invention. For example, MPEG intra-coded or I frame picture packets could be 
encrypted to inhibit viewing of the video portion of the program. Embodiments the 
present invention may be used in any combination with other embodiments, e.g. 
scrambling the packet containing the PES header as well as random, M m and N, 
or data structure encryption of the other packets. Critical packet encryption may 
be applied to video encryption, while a different method may be applied to audio. 
Audio could be dual encrypted, for instance. Other variations within the scope of 
the present invention will occur to those skilled in the art. 

FIGURE 7 is a flow chart depicting an exemplary encoding process such as 
that which would be used at headend 322 of FIGURE 6. When a transport stream 
packet is received at 350, the packet is examined to determine if it meets a 



-31- 



WO 03/061289 PCT/US02/40050 

■ 

selection criteria for encryption. In the preferred embodiment, this selection criteria 
is the presence of a PES header as a portion of the packet payload. If not, the 
packet is passed as a clear unencrypted packet (C) for insertion into the output 
data stream at 354. If the packet meets the criteria, it is encrypted under CA 
encryption system A at 358 to produce an encrypted packet EA. The packet is 
also duplicated and encrypted under CA encryption system B at 362 to produce 
an encrypted packet. This encrypted packet is mapped to a secondary PID at 366 
to produce an encrypted packet EB. Encrypted packets EA and EB are inserted 
into the output data stream along with clear packets C at 354. Preferably, the EA 
and EB packets are inserted at the location in the data stream where the single 
original packet. was obtained for encryption so that the sequencing of the data 

* 

remains essentially the same. 

When the output data stream from 354 is received at an STB compliant with 
CA encryption system B such as 336 of FIGURE 6, a process such as that of 
FIGURE 8 (which is similar to that of FIGURE 5) can be utilized to decrypt and 
decode the program. When a packet is received having either the primary or the 
secondary PID at 370, a determination is made as to whether the packet is clear 
(C) or encrypted under system A (EA) at 370 or encrypted under system B (EB) at 
374. If the packet is clear, it is passed directly to the decoder 378. In some 
embodiments, the relative position of the primary packet, before or after, to the 
secondary packet may be used to signal a primary packet for replacement in the 
stream. A check of the scrambling state of the primary packet is not specifically 
required. If the packet is an EA packet, it is dropped at 380. If the packet is an EB 
packet, it is decrypted at 384. At this point, the secondary PID packets and/or the 
primary PID packets are remapped to the same PID at 388. The decrypted and 
clear packets are decoded at 378. 

The dual partial encryption arrangement described above can greatly reduce 
the bandwidth requirements over that required for full dual carriage. Encrypting the 
PES header information can be effective in securing video and audio content, while 
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allowing two or more CA systems to independently a co-exist M on the same cable 
system. Legacy system A set-top boxes are un-affected, and system B set-top 
boxes require only an minor hardware, firmware, or software enhancement to listen 
for two PIDs each for video and audio. Each type of STB, legacy and non-legacy, 
retains its intrinsic CA methodology. Headend modification is limited to selecting 
content for encryption, introducing the second encrypter, and providing a means to 
mix the combination into a composite output stream. 

In one embodiment, the headend, equipment is configured to 
opportunistically scramble as much of the content as the bandwidth will allow, and 
not just the critical PES headers. These additional scrambled packets would be 
either in the PES payload or other packets throughout the video/audio frame to 
provide even further security of the content. 

SI ENCRYPTION 

Turning now to FIGURE 9, one embodiment of a system that minimizes 
the need for any additional bandwidth is illustrated as system 400. In this 
embodiment, the system takes advantage of the fact that system information (SI) 
428 is required for a set-top box to tune programming. In a cable system, SI is sent 
in the out-of-band, a frequency set aside from the normal viewing channels. It is 
possible to also sent it in-band. If sent in-band, the SI 428 is replicated and sent 
with each stream. For discussion purposes, assume that the SI delivered to 
"legacy" set-top boxes from previous manufacturers is separate from the SI 
delivered to set-tops from new manufacturers such as STB 436. Consequently, 
each version of the SI can be independently scrambled as illustrated using 
conditional access system A 41 8 and conditional access system B 424. The clear 
video 404 and clear audio 406 are delivered in the clear, but in order to understand 
how to find them, the SI information 428 is needed. 

The SI delivers information about channel names and program guide 
information such as program names and start times, etc. ... as well as the 
frequency tuning information for each channel. Digital channels are multiplexed 

-33- 



WO 03/061289 



PCT/US02/40050 



together and delivered at particular frequencies. In the embodiment of the 
invention, the SI information is encrypted, and only made available to authorized 
set-top boxes. If the SI information is not received to allow knowledge of the 
location of all the A/V frequencies in the plant, then tuning cannot take place. 

* 

To frustrate a hacker who might program a set-top box to trial or scan 
frequencies, the frequencies for the channels can be offset from the standard 
frequencies. Also, the frequencies can be dynamically changed on a daily, weekly 
or other periodic or random basis. A typical cable headend may have roughly 30 
frequencies in use. Each frequency is typically chosen to avoid interference 
between, among other things, each other, terrestrial broadcast signals, and 
frequencies used by clocks of the receiving equipment. Each channel has at least 
1 independent alternate frequency that if used would not could not cause 
interference, or cause the frequency of adjoining channels to be changed. The 
actual possible frequency maps are therefore 2 30 or 1 .07 x 1 0 9 . However, a hacker 
might simply quickly try both frequencies on each tune attempt for each of the 30 
channels or so. If successful in locating a frequency with content, the hacker's set- 
top box can then parse the PSI 429 to learn about the individual PIDs that make up 
a program. The hacker will have difficulty learning that "program T is "CNN"., and 
that "program 5 n is "TNN°, and so on. That information is sent with the SI, which as 
stated above is scrambled and otherwise unavailable to the un-authorized set-top 
box. However, a persistent hacker might yet figure those out by selecting each one 
and examining the content delivered. So in order to frustrate the identification of 
channels, the assignment of a program within a single stream can move around, 
e.g. program 2 and program 5 swapped in the example above so that "program V 
is TNN" and "program 5* is "CNN 0 . Also, it is possible to move programs to 
entirely different streams with entirely new program groupings. A typical digital 
cable headend can deliver 250 programs of content including music. Each can be 
uniquely tuned. The possible combinations for re-ordering are 250! (factorial). 
Without a map of the content provided by either the delivered SI or by a hacker, the 
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user is faced with randomly selecting each program in a stream to see if it is the 
one interest 

Thus, at headend 422, the video signal 404 and the audio signal 406 are 
provided in the clear (unencrypted) while the SI 428 is provided to multiple CA 
systems for delivery over the cable network. Thus, in the exemplary system 400, 
clear SI 428 is provided to an encryption system 428 that encrypts SI data using 
encryption system A. Simultaneously, clear SI 428 is provided to encryption 
system 424 that encrypts the SI data using encryption system B. Clear video and 
audio are then multiplexed along with encrypted SI from 418 (SI A) and encrypted 
audio from 424 (SI B) out of band system information 428. 

After distribution through the cable system 32, the video, the audio, system 
information A and system information B are all delivered to set-top boxes 36 and 
436. At STB 36, the encrypted SI is decrypted at CA system A 40 to provide tuning 
information to the set-top box. The set-top box tunes a particular program to allow 
it to be displayed on television set 44. Similarly, at STB 436, the encrypted SI is 
decrypted at CA system B 440 to provide tuning information for the set-top box, 
allow a particular program to be tuned and displayed on television set 444. 

An advantage of this approach is that no additional A/V bandwidth is 
required in the content delivery system, e.g. cable system. Only the SI is dual 
carried. No special hardware is required. Any offset frequencies from the standard 
ones can be easily accommodated by most tuners. SI decryption can be performed 
in software or can be aided by hardware. For example, legacy Motorola set-top 
boxes have an ability to descramble the SI delivered in the Motorola out-of-band 
using a hardware decrypter built into the decoder IC chip. 

A determined hacker can potentially use a spectrum analyzer on the coax 
cable to learn where the AA/ channels are located. Also, it may be possible for the 
hacker to program a set-top box to auto-scan the frequency band to learn where the 
AA/ channels are - a relatively slow process. If the AA/ channel frequencies 
changed dynamically, then that could foil the hackers, since they would need to be 
constantly analyzing or scanning the band. Also, the program numbers and 

-35- 



WO 03/061289 PCT/US02/40050 

assigned PIDs can vary. However, dynamically changing frequencies, program 
numbers, and PIDs might create operational difficulties to a service provider, e.g. 
cable operator. 

GENERALIZED REPRESENTATION 

Each of the above techniques can be represented generically by the system 
500 of FIGURE 10. This system 500 has a cable system headend 522 with clear 
video 504, clear audio 506, SI 528, and PSI 529 any of which can be selectively 

• * 

switched through an intelligent processor controlled switch 518, which also serves 
to assign PIDs (in embodiments requiring PID assignment or reassignment), to 
conditional access system A 504 or conditional access system B 524 or passed 

* * 

in the clear to the cable system 32. As previously, the program or SI encrypted 
according to the legacy CA system A can be properly decoded by STB 36. The CA 
system B encrypted information is understood by STBs 536 and decrypted and 
decoded accordingly, as described previously. 

PID MAPPING CONSIDERATIONS 

» 

The PID mapping concepts described above can be generally applied to the 
dual partial encryption techniques described herein, where needed. At the cable 
headend, the general concept is that a data stream of packets is manipulated to 
duplicate packets selected for encryption. Those packets are duplicated and 
encrypted under two distinct encryption methods. The duplicated packets are 
assigned separate PIDs (one of which matches the legacy CA PID used for clear 
. content) and reinserted in the location of the original selected packet in the data 
stream for transmission over the cable system. At the output of the cable system 
headend, a stream of packets appears with the legacy encrypted packets and clear 
packets having the same PID. A secondary PID identifies the packets that are 
encrypted under the new encryption system. In addition to the PID remapping that 
takes place at the headend, MPEG packets utilize a continuity counter to maintain 
the appropriate sequence of the packets. In order to assure proper decoding, this 
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continuity counter should be properly maintained during creation of the packetized 
data stream at the headend. This is accomplished by assuring that packets with 
each PID are assigned continuity counters sequentially in a normal manner. Thus, 
packets with the secondary PID will carry a separate continuity counter from those 
of the primary PID. This is illustrated below in simplified form where PID 025 is the 
primary PID and PID 125 is the secondary PID, E represents an encrypted packet, 
C represents a clear packet, and the end number represents a continuity counter. 

|025C04 |025E0S [ 125E11 | 025C06 | 025C07 | 025C08 | 025C09 | 125E12 

In this exemplary segment of packets, packets with PID 025 are seen to 
have their own sequence of continuity counters (04, 05, 06, 07, 08, 09, ...). 
Similarly, the packets with secondary PID 125 also have their own sequence of 
continuity counters (1 1 , 12, ...). 

At the STB, the PIDs can be manipulated in any number of ways to correctly 
associate the encrypted packets with secondary PID with the correct program. In 
one implementation, the packet headers of an input stream segment illustrated 
below: 



025C04 


025E05 


125E11 


I 025C06 


[025C07 


025C08 


025C09 


025E10 


are manipulated to create the following output stream segment: 


125C04 


025E11 


125E05 


125C06 


125C07 | 


125C08 | 


125C09 j 


125E10 



The primary PIDs (025) in the input stream are replaced with the secondary PID 
(125) for the clear packets (C). For the encrypted packets, the primary PID and 
secondary PID are retained, but the continuity counters are swapped. Thus, the 
stream of packets can now be properly decrypted and decoded without errors 
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caused by loss of continuity using the secondary PID. Other methods for 
manipulation of the PIDs, e.g. mapping the PID (125) on the scrambled legacy 
packet to a NOP PID (all ones) or other PID value not decoded, and the continuity 
counters can also be used in embodiments consistent with the present invention. 

The primary and secondary PIDs are conveyed to the STBs in the program 
map table (PMT) transmitted as a part of the program system information (PSI) 
data stream. The existence of a secondary PID can be established to be ignored 
by the STB operating under CA encryption system A (the "legacy" system), but new 
STBs operating under CA encryption system B are programmed to recognize that 
secondary PIDs are used to convey the encrypted part of the program associated 
with the primary PID. The set-top boxes are alerted to the fact that this encryption 
scheme is being used by the presence of a CA descriptor in the elementary PID "for 
loop" of the PMT. There typically would be a CA descriptor for the video 
elementary PID "for loop", and another one in the audio elementary PID "for loop". 
The CA descriptor uses a Private Data Byte to identify the CA_PID as either the 
ECM PID or the secondary PID used for partial scrambling, thus setting up. the STB 

4 

operating under system B to look for both primary and secondary PIDs associated 
with a single program. Since the PID field in the transport header is thirteen bits 
in length, there are 2 13 or 8,192 PIDs available for use, any spare PIDs can be 
utilized for the secondary PIDs as required. 

In addition to the assignment of a PID for each program component or 
selected portion thereof, a new PID may be assigned to tag ECM data used in the 
second encryption technique. Each PID number assigned can be noted as a user 
defined stream type to prevent disrupting operation of a legacy STB. MPEG 
defines a reserved block of such numbers for user defined data stream types. 

While conceptually the PID mapping at the cable headend is a simple 
operation, in practice the cable headend equipment is often already established 
and is therefore modified to accomplish this task in a manner that is minimally 
disruptive to the established cable system while being cost effective. Thus, the 
details of the actual implementation within the cable system headend are 
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somewhat dependent upon the actual legacy hardware present in the headend, 
examples of which are described in greater detail below. 

■ 

Headend IMPLEMENTATIONS 

Those skilled in the art will appreciate that the above descriptions as related 
to FIGURES 2, 3, 6, 9 and 10 are somewhat conceptual in nature and are used to 
explain the overall ideas and concepts associated with the various embodiments 
of the present invention. In realizing a real world implementation of the present 
invention, those skilled in the art will recognize that a significant real world issue 
to contend with is providing a cost effective implementation of the various partial 
encryption methods within existing legacy headend equipment at established cable 
providers. Taking two of the primary legacy cable systems as examples, the 
following describes how the above techniques can be implemented at a cable 
headend. 

. First, consider a cable system headend using a Motorola brand conditional 
access system. In such a system the modifications shown in FIGURE 11 can be 
done to provide a cost effective mechanism for partial dual encryption 
implementation. In a typical Motorola system, a HITS (Headend In The Sky) or 
similar data feed is provided from a satellite. This feed provides aggregated 
digitized content that is supplied to cable providers and is received by a receiver/ 
descrambler / scrambler system 604 such as the Motorola Integrated Receiver 
Transcoder (IRT) models IRT 1 000 and IRT2000, and Motorola Modular Processing 
System (MPS). A clear stream of digitized television data can be obtained from the 
satellite descrambler functional block 606 of the receiver /descrambler /scrambler 
604. This clear stream can be manipulated by a new functional block shown as 
packet selector / duplicator 610. This new block 610 may be implemented as a 
programmed processor or may be otherwise implemented in hardware, software 
or a combination thereof. 
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Packet selector / duplicator 610 selects packets that are to be dual 
encrypted under any of the above partial dual encryption methods. Those packets 
are then duplicated with new PIDs so that they can be later identified for encryption. 
For example, if packets at the input of 61 0 associated with a particular program 
have PID A, then packet selector / duplicator 61 0 identifies packets to be encrypted 
and duplicates those packets and remaps them to PIDs B and C respectively, so 
that they can be identified later for encryption under two different systems. 
Preferably, the duplicate packets are inserted into the data stream adjacent one 
another in the location of the originally duplicated packet now with PID C so that 
they remain in the same order originally presented (except that there are two 
packets where one previously resided in the data stream). Assume, for the 
moment, that the new CA system to be added is NDS encryption. In this case, PID 
A will represent clear packets, PID B will represent NDS encrypted packets and 
PID C will represent Motorola encrypted packets. The packets having PID B may 
be encrypted under the NDS encryption at this point in 610 or may be encrypted 
later. 

The packets with PIDs B and C are then returned to the system 604 where 
packets with PID C are encrypted under Motorola encryption at cable scrambler 
612 as instructed by the control system 614 associated with the Motorola 
equipment. The output stream from cable scrambler 61 2 then proceeds to another 
new device - PID remapper and scrambler 620, which receives the output stream 
from 612 and now remaps the remaining packets with PID A to PID C and encrypts 
the PID B packets under the NDS encryption algorithm under control of control 
system 624. The output stream at 626 has clear unencrypted packets with PID C 
and selected packets which have been duplicated and encrypted under the 
Motorola encryption system with PID C along with encrypted packets under the 
NDS encryption system with PID B. This stream is then modulated (e.g., 
Quadrature Amplitude Modulated and RF modulated) for distribution over the cable 
system. The preferred embodiment maps the unencrypted packets on PID A to 
match the scrambled packets on PID C because the audio and video PIDs called 
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out in legacy program specific information (PSI) is correct- that way. The control 
computer, the scrambler, and legacy set-top boxes only know about PID C. 
Alternatively, the scrambled packets on PID C could be mapped back to PID A, but 
this would likely mean editing the PSI, that was automatically generated, to map 
the PID numbers from PID C back to PID A in the PID remapper and scrambler 
620. 

In the above example, the PID remapper and scrambler 620 may also be 
used to demultiplex PSI information, modify it to reflect the addition of the NDS 
encryption (through the use of CA descriptors in the PMT) and multiplex the 
modified PSI information back into the data stream. The ECMs to support NDS 
encryption may also be inserted into the data stream at PID remapper and 
scrambler 620 (or could be inserted by packet selector / duplicator 610). 

« 

Thus, in order to add NDS encryption (or another encryption system) to a 
cable system headend using Motorola equipment, packets are duplicated and PIDs 
are remapped in the data stream from the satellite descrambler. The remapped 
PIDs are then used to identify packets that are to be scrambled under each CA 
system. Once the legacy system encryption has taken place, the clear PID is then 
remapped so that both clear and encrypted packets in the legacy system share the 
same PID (or PIDs). PID remapping as in 620 and packet selection and duplication 
as in 610 can be implemented using a programmed processor or using custom or 
semi-custom integrated circuitry such as an application specific integrated circuit 
or a programmable logic device. or field programmable gate array. Other 
implementations are also possible without departing from the present invention. 

FIGURE 12 depicts a similar equipment configuration such as that used in 
implementing the partial dual encryption of the present invention in a Scientific 
Atlanta based cable headend. In this embodiment, the HITS feed or similar is 
received at IRD 704 which incorporates a satellite descrambler 706. This may be 
a Motorola IRT or MPS with only the satellite descrambler function enabled. The 
output of the satellite descrambler 706 again provides a clear data stream: that can 
be manipulated by a new packet selector / duplicator 710 which selects packets 
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to be encrypted, duplicates them and maps the PIDs of the duplicate packets to 
new PIDs.. Again, for example, packets to remain in the clear are assigned PID A, 
packets to be encrypted under the new system (e.g. , NDS) are assigned PID B and 
packets to be encrypted under the Scientific Atlanta encryption system are 
assigned PID C. The packets with PID B may be encrypted at this point under the 
NDS encryption system. 

The stream of packets is then sent to a multiplexer 712 (e.g., a Scientific 
- Atlanta multiplexer) where the packets having PID C are encrypted under the. 
Scientific Atlanta encryption system at 714 under control of control system 718 
associated with multiplexer 712. The stream of data is then supplied internal to 
multiplexer 712 to a QAM modulator 720. In order to properly remap the packets, 
the QAM modulated signal at the output of multiplexer 712 is provided to a new 
processor system 724 where the QAM modulated signal is demodulated at a QAM 
demodulator 730 and the clear PID A packets are remapped to PID C at PJD 
remapper 734 under control of a control system 738. Encryption under the NDS 
encryption algorithm can also be carried out here rather than in 710. The data 
stream with remapped PIDs and dual partial encryption is then QAM and RF 
modulated at 742 for distribution over the cable system. 

In the above example, the PID remapper and scrambler 734 may also be 
used to demultiplex PSI information, modify it to reflect the addition of the NDS 
encryption (adding the CA descriptors to the PMT) and multiplex the modified PSI 
information back into the data stream. The ECMs to support NDS encryption may 
also be inserted into the data stream at PID remapper and scrambler 734 (or could 
be inserted by packet selector / duplicator 71 0). PID remapping and or scrambling 
as in 734 along with QAM demodulation and QAM modulation as in 730 and 742 
respectively, and packet selection and duplication as in 710 can be implemented 
using a programmed processor or using custom or semi-custom integrated circuitry 
such as an application specific integrated circuit or a programmable logic device 
or field programmable gate array. Other implementations are also possible without 
departing from the present invention. 
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The above embodiments of the present invention allow legacy scrambling 
equipment to scramble only the packets desired in an elementary stream instead 
of the entire elementary stream. The scrambling of certain packets of an 
elementary stream is accomplished by using a PID number for packets that are not 
going to be scrambled, e.g., PID A. Packets that will be scrambled will be placed 
on PID C. The scrambling equipment will scramble the packets on PID C (the ones 
that have been selected for scrambling). After the scrambling has taken place, the 
unscrambled packets have the PID number mapped to the same as the scrambled 
packet - PID A becomes PID C. The legacy set-top boxes will receive an 
elementary stream with both scrambled and un-scrambled packets. 

The packets in these embodiments are handled as a stream. The entire 
stream is sent to the legacy scrambling equipment for scrambling. This keeps all 
of the packets in exact time synchronous order. If packets were extracted from a 
stream and sent to the legacy scrambling equipment, time jitter might be 
introduced. The present embodiment avoids that problem by keeping all the 
packets in a stream. The embodiment does not require cooperation from the 
legacy scrambling equipment provider because that equipment is not involved in 
• the remapping of packets- from PID A to PID C. This remapping is preferable 
because the PID called out by the PSI generated by the legacy scrambling system 
does not need to change. The legacy system knows about PID C, but not PID A. 
The entire elementary stream to be scrambled by the legacy scrambling equipment 
is found on a single PID that the scrambling system has been instructed to 
scramble. 

In the above examples, the use of NDS as the second encryption system 
should not be considered limiting. Moreover, although two widely used systems - 
Motorola and Scientific Atlanta have been depicted by way of example, similar 
modifications to legacy systems to permit PID remapping and dual partial 
encryption can be used. In general, the technique described above involves the 
process generally described as 800 in FIGURE 1 3. A feed is received at 806 which 
is descrambled as it is received at 810 to produce a clear data stream of packets. 
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At 814, packets are selected according to the desired partial duai encryption 
technique (e.g., audio only, packets containing PES header, etc.). At 818, the 
selected packets are duplicated and the duplicate pairs are remapped to two new 
PIDs (e.g., PID B and PID C). The duplicated packets are then encrypted based 
upon PID (that is, PID C is encrypted according to legacy encryption and PID B is 
encrypted according to the new encryption system) at 822. The clear packets (e.g. , 
PID A) are then remapped to the same PID as the legacy encrypted PID (PID C) at 
826. 

The order in which some of the elements of the process of FIGURE 13 are 
carried out can vary according to the particular legacy system being modified to 
accommodate the particular dual encryption arrangement being used. For 
example, encryption under a new encryption system can be carried out either at the 
time of duplication or later at the time of remapping the legacy packets, as 
illustrated in FIGURE 11 and 12. Additionally, various demodulation and re- 
modulation operations can be carried out as needed to accommodate the particular 
legacy system at hand (not shown in FIGURE 13). 

* 

* 

SET-TOP BOX IMPLEMENTATIONS 

Several set-top box implementations are possible within the scope of the 
present invention. The method used at the headend to select packets for 
encryption is irrelevant to the STB. 

One such implementation is illustrated in FIGURE 14. In this embodiment, 
packets from a tuner and demodulator 904 are provided to a decoder circuit 908's 
demultiplexer 910. The packets are buffered into a memory 912 (e.g., using a 
unified memory architecture) and processed by the STB's main CPU 916 using 
software stored in ROM memory 920. 

Selected PIDs can be stripped from the incoming transport via the STB's PID 
filter, decrypted and buffered in SDRAM, similar to the initial processing required 
in preparation for transfer to an HDD in a PVR application. The host CPU 916 can 

« 
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then "manually" filter the buffered data in SDRAM for elimination of the packets 
containing unneeded PIDs. There are some obvious side effects to this process. 

The host overhead is estimated to be about 1 % of the bandwidth of the CPU. 
In the worst case, this is equivalent to 40K bytes/Second for a 15 Mbit/S video 
stream. This reduction is possible since at most only 4 bytes of each packet is 
evaluated and the location is on 188 byte intervals so the intervening data does not 
have to be considered. Each packet header in SDRAM can therefore be directly 
accessed through simple memory pointer manipulation. Additionally, Packets are 
cached in blocks and evaluated en masse to reduce task switching of the host. 
This would eliminate an interrupt to other tasks upon the reception of each new 
packet. This may produce a increased latency for starting decode of a stream upon 
channel change to allow time for cache fill. This may be negligible depending upon 
the allocated SDRAM cache buffer size. 

The host filtered packets in the SDRAM buffer are then transferred to the AN 
Queue through existing hardware DMA processes and mimics a PVR 
implementation. The filtered packets are then provided to the decoder 922 for 
decoding. 

A second technique for implementation in a set-top box is illustrated in 
FIGURE 15. Since RISC processor A/V decoder module in 930 processes the 
partial transport PIDs and strips/concatenates for decode, the firmware within 
decoder IC 930 can be altered to exclude individual packets in a partial transport 
stream based upon criteria in each packet header. Alternatively, the demultiplexer 
910 can be designed to exclude the packets. Legacy scrambled packet(s) pass 
through the CA module still encrypted. By using the decoder IC 930 to perform the 

■ 

removal of the legacy scrambled packets and assuming that the packets encrypted 
under the new encryption algorithm (e.g., NDS) is immediately adjacent the legacy 
encrypted packet (or at least prior to next primary stream video packet) then the 
pruning of the legacy packet in effect accomplishes the merging of a single, clear 

i 

stream into the header strip and video queue. 

# 
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A third technique for implementation of partial decryption in a set-top box is 
illustrated in FIGURE 16. In this embodiment, the PID remapping is carried out 
either wjthin a circuit such as an ASIC, Field Programmable Gate Array (FPGA), 
or a programmable logic device (PLD) 938 or other custom designed circuit placed 
between the tuner and demodulator 904 and the decoder IC 908. In a variation of 
this embodiment, the decoder. IC 908 can be modified to implement the PID 
remapping within demultiplexer 940. In either case, the legacy encrypted packets 
are dropped and the non-legacy packets re-mapped either in circuit 938 or 
demultiplexer 940. 

This third technique can be implemented in one embodiment using the PLD 
depicted in FIGURE 17. This implementation assumes that there will be not be 
more than one encrypted packet of a particular PID appearing in a row, thus, the 
implementation could be modified to accommodate bursts of encrypted packets 
such as with the M and N* encryption arrangement described above (as will be 
explained later). The input stream passes through a PID identifier 950 which 
serves to demultiplex the input stream based upon PID. Primary PID packets are 
checked for continuity at 958. If a continuity error is detected, the error is noted and 
the counter is reset at 960. 

The original input packet stream contains packets tagged with many PIDs. 
The PID identifier 950 separates packets with the two PIDs of interest (primary and 
secondary PIDs) from all other packets. This capability can be scaled to process 
multiple PID pairs. These other packets are bypassed directly to the revised output 
stream. This processing results in a three or four byte clocking delay. 

Packets with the secondary PID are routed by the PID identifier 950 to a 
continuity count checker 954 which verifies sequence integrity for this PID. Any 
errors are noted at 956, but specific handling of errors is not relevant to 
understanding the present invention. The packet's continuity value is preserved for 
use in checking the sequence of packets to follow. A corresponding continuity 
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* 

check 968 is done for packets with the primary PID using the independent primary 
counter, and again any errors are noted at 960. 

The secondary packet is checked for a secondary flag at 962. This Boolean 
indicator is used to remember if a secondary packet has been processed since the 
last clear packet. More than one secondary packet between clear packets is an 
error in this embodiment and is noted at 964. Presence of a secondary packet is 
remembered by setting the secondary flag at 966. 

The continuity counter of the secondary packet is changed at 968 to fit into 
the. sequence of the clear packets. Data for this substitution comes from the value 
used to verify continuity of the primary streamat 958. The revised packet is sent 
out from 968 and merged into the revised stream forming the output stream. 

After packets with primary PIDs have had their continuity checked at 958, 
they are differentiated at 970 by the scrambling flags in the header, if the packet 
is scrambled, the primary flag is queried at 974. This primary flag Boolean 
indicator is used to remember if a primary encrypted packet has been processed 
since the last clear packet. More than one encrypted primary packet between clear 
packets is an error in this embodiment and is noted at 976 before the packet is 
discarded at 978. Presence of a encrypted primary packet is remembered by 
setting the primary flag at 980. If there is no downstream consumer for the primary 
encrypted packet, it can be discarded at 978. In some cases it may be necessary 
for the packet to continue on (in which case its continuity counter can use the 
discarded secondary continuity value). 

If the primary PID scramble test at 970 detects a clear packet, the state of 
the secondary and primary flags is tested at 984. Valid conditions are neither set 
and both set, since encrypted packets should come in matched pairs. A sequence 
of one without the other should be noted as an error at 988. However, the order of 
appearance is inconsequential in this embodiment. It should be noted that there 
may be other ways to flag a primary packet for deletion other than the scrambling 
bits in the transport header, e.g. the transport_priority bit. Also, it is possible not 
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to use any bits what-so-ever, e.g. using the primary packet's simple positional 
information, before or after the secondary packet, as an indicator for replacement. 

Clear packets with the primary PID then have their PID value changed at 992 
to the secondary PID before being output in the revised output stream. 
Alternatively, the secondary PID packets can be remapped to the primary PID 
value. The content can be decoded when the decoder is provided with the correct 
PID for decoding the content (whether the primary or secondary PID). Presence of 
a clear packet also clears the primary and secondary Boolean flags. 

In all the embodiments proposed, the secondary packet can be inserted 
adjoining the primary packet to be replaced even when a series of primary packets 
are tagged for replacement. However, in some instances, it may facilitate headend 
partial scrambling if multiple encrypted packets can be inserted into the stream 

* 

without the intervening secondary packets. In order to accommodate multiple 
consecutive encrypted packets (such as with the M* and N partial encryption 
method), the use of primary and secondary flags can be replaced with a counter 
matching test function. Thus, in place of elements 962, 964 and 966, a secondary 
encrypted packet counter can be incremented. In place of elements 970, 974, 976 
and 980, a primary encrypted packet counter can be incremented. Element 984 
. can be replaced with a comparison of the primary and secondary encrypted packet 
counters to assure that the same number of encrypted packets are received in both 
the primary and secondary paths. Instead of clearing flags at 992, the counters are 
cleared. Using this variation, multiple encrypted packets may be consecutively 
received and the number received are compared to monitor the integrity of the data 

4 

stream. Other variations will occur to those skilled in the art. 

The function described above in connection with FIGURE 17 can be 
integrated into an AN decoder chip that functions similar to that of the 
commercially available Broadcom series 70xx or 71 xx decoder used in commercial 
set-top boxes. FIGURE 18 illustrates a block diagram for such a decoder chip 
where the functions already provided in the commercial chip are essentially 
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unchanged. Normally, commercial decoder chips expect there to be a one-to-one 
correspondence between the PIDs and program components (e.g., audio or video). 

The decoder illustrated in FIGURE 18 permits multiple PIDs to be 
programmed into the decoder via a connection to the STB central processor so that 
both primary and secondary PIDs can be handled for main audio, main video and 
a secondary video used for picture-in-picture (PiP) functions. In this embodiment, 
the raw data stream is received by a Packet sorter 1 002 that provides a function 
similar to that described in connection with FIGURE 17 above to demultiplex the 
stream of packets based upon PID. Preferably, the decoder of FIGURE 18 carries 
out the PID sorting function of 1002 using hard wired logic circuitry rather than 
programmed software. Program guide and stream navigation information is output 
for use by anSTB's main processor, for example. The packets associated with the 
main audio program are buffered in a FIFO 1006, decrypted in a decrypter 1010 
and then buffered at 1 01 4 for retrieval by an MPEG audio decoder 1 01 8 as needed. 

Decoded MPEG audio is then provided as an output from the decoder. 

- 

In a similar manner, packets associated with the main video program are 
buffered in a FIFO 1024, decrypted in a decrypter 1028 and then buffered at 1032 
for retrieval by an MPEG video decoder .1 036 as needed. Decoded MPEG video 
for the main channel is then provided to a compositer 1040 and then provided as 
an output from the decoder. Similarly, packets associated with picture-in-picture 
video are buffered in a FIF0 1 044, decrypted in a decrypter 1 048 and then buffered 
at 1 052 for retrieval by an MPEG video decoder 1 056 as needed. Decoded MPEG 
video for the picture-in-picture channel is then provided to the compositer 1040 
where it is combined with the main channel video and then provided as a decoded 
video output from the decoder. Other packets not associated with the main or 
picture-in-picture channel are discarded. Of course, other functions may be 
incorporated in the decoder chip or deleted without departing from embodiments 
of the present invention. 
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CONCLUSION 

As previously mentioned, in order to thwart a persistent threat by hackers, 
several of the above partial encryption arrangements can be combined to further 
enhance security. For example, the critical packet encryption can be used in any 
combination with SI encryption, M* an N, random encryption, time slice and other 
techniques to further enhance security. In one embodiment, as many packets 
would be encrypted as bandwidth is available. The amount of encryption might 
depend on whether the content was a regular program or premium (such as a pay- 
per-view or VOD), whether it was an adult program or a regular movie, and the 
security level that the various cable operators feel comfortable operating. Those 
skilled in the art will appreciate that many other combinations are possible to 
further enhance the security of the encryption without departing from the present 
invention. 

* 

The present invention, as described above in its various embodiments, has 
been described in terms of a digital A/V system using MPEG 2 coding. Thus, the 
■. various packet names and protocol specifically discussed is related the MPEG 2 
coding and decoding. However, those skilled in the art will appreciate that the 
concepts disclosed and claimed herein are not to be construed in such a limited 
scope. The same or analogous techniques can be used in any digital cable system 
without limitation to MPEG 2 protocols. Moreover, the present techniques can be 
used in any other suitable content delivery scenario including, but not limited to, 
terrestrial broadcast based content delivery systems, Internet based content 
delivery, satellite based content delivery systems such as, for example, the Digital 
Satellite Service (DSS) such as that used in the DirecTV™ system, as well as 
package media (e.g. CDs and DVDs). These various alternatives are considered 
equivalent for purposes of this document, and the exemplary MPEG 2 cable 
embodiment should be considered to be an exemplary embodiment presented for 
illustrative purposes. 

In addition, the present invention has been described in terms of decoding 
partially encrypted television programs using a television set-top box. However, the 
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present decoding mechanism can equally be implemented within a television 
receiver without need for an STB, or music player such as an MP3 player. Such 
embodiments are considered equivalent. 

Also, while the present invention has been described in terms of the use of 
the encryption techniques described to provide a mechanism for dual partial 
encryption of a television program, these partial encryption techniques could be 
used as a single encryption technique or for multiple encryption under more than 
two encryption systems without limitation. More than two encryption systems 
would be accommodated with additional duplicated packets that are encrypted. 
Alternatively, the encryption key for one of the duplicated packets may be shared 
amongst the multiple encryption systems. Additionally, although specifically 
disclosed for the purpose of encryption of television programming, the present 
inventions can be utilized for single or dual encryption of other content including, 
but not limited to content for download over the Internet or other network, music 
content, packaged media content as well as other types of information content. 
Such content may be played on any number of playback devices including but not 
limited to personal digital assistants (PDAs), personal computers, personal music 
players, audio systems, audio / video systems, etc. without departing from the 
present invention. 

Those skilled in the art will recognize that the present invention has been 
described in terms of exemplary embodiments that can be realized by use of a 
programmed processor. However, the invention should not be so limited, since the 
present invention could be implemented using hardware component equivalents 
such as special purpose hardware and/or dedicated processors which are 
equivalents to the invention as described and claimed. Similarly, general purpose 
computers, microprocessor based computers, micro-controllers, optical computers, 
analog computers, dedicated processors and/or dedicated hard wired logic may be 
used to construct alternative equivalent embodiments of the present invention. 

Those skilled in the art will appreciate that the program steps and associated 
data used to implement the embodiments described above can be implemented 
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using disc storage as well as other forms of storage such as for example Read 
Only Memory (ROM) devices, Random Access Memory (RAM) devices; optical 
storage elements, magnetic storage elements, magneto-optical storage elements, 
flash memory, core memory and/or other equivalent storage technologies without 
departing from the present invention. Such alternative storage devices should be 
considered equivalents. 

The present invention, as described in embodiments herein, can be 
implemented using a programmed processor executing programming instructions 

* 

that are broadly described above in flow chart form that can be stored on any 
suitable electronic storage medium or transmitted over any suitable electronic 
communication medium. However, those skilled in the art will appreciate that the 
processes described above can be implemented in any number of variations and 
in many suitable programming languages without departing from the present 
invention. For example, the order of certain operations carried out can often be 
varied, additional operations can be added or operations can be deleted without 
departing from the invention. Error trapping can be added and/or enhanced and 
variations can be made in user interface and information presentation without 
departing from the present invention. Such variations are contemplated and 
considered equivalent. 

While the invention has been described in conjunction with specific 
embodiments, it is evident that many alternatives, modifications, permutations and 
variations will become apparent to those skilled in the art in light of the foregoing 
description. Accordingly, it is intended that the present invention embrace all such 
alternatives, modifications and variations as fall within the scope of the appended 
claims. 

What is claimed is: 
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1 . . A method of encrypting a digital television signal, comprising: 

examining unencrypted packets of data in the digital television signal to 

identify a predetermined packet type; 

encrypting packets identified as being of the predetermined packet type; and 
replacing the unencrypted packets of the predetermined packet type with the 

encrypted packets in the digital television signal to produce a partially encrypted 

digital television signal. 

2. The method according to claim 1 , further comprising distributing the partially 
encrypted digital television signal. 

3. The method according to claim 1, wherein the predetermined packet type 
comprises a packet carrying information that is needed to decode the digital 
television signal. 

4. The method according to claim 1, wherein the digital television signal 
complies with an MPEG standard, and wherein the predetermined packet type 
comprises packets carrying a payload that comprises a packetized elementary 
stream (PES) header. 

5. The method according to claim 1, wherein the digital television signal 
complies with the digital satellite service transport standard, and wherein the 
predetermined packet type comprises packets carrying a payload of a packetized 
elementary stream header. 

6. The method according to claim 1 , wherein the predetermined packet type 
comprises video packets carrying a payload of a video sequence header. 

7. The method according to claim 1, wherein the predetermined packet type 
comprises video packets carrying a payload of a group of pictures header. 
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* 

* 

8. The method according to claim 1 , wherein the predetermined packet type 
comprises video packets carrying a payload of closed captioning information. 

9. The method according to claim 1, further comprising assigning a packet 
identifier to the unencrypted packets. 

10. The method according to claim 9, further comprising assigning the packet 
identifier to the encrypted packets. 

■ 

1 1 . The method according to claim 9, wherein the packet identifier comprises 
a primary packet identifier; and further comprising assigning a secondary packet 
identifier to the encrypted packets. 

■ 

12. An electronic storage medium storing instructions which, when executed on 
a programmed processor, carry out the method of encrypting a television signal 
according to claim 1. 

1 3. An electronic transmission medium carrying an encrypted television signal 
encrypted by the method according to claim 1. 

* 

14. The method according to claim 1, wherein the television signal is 
compressed, and wherein the predetermined packet type comprises a packet 
carrying information that is needed to decompress the television signal. 

15. The method according to claim 3, further comprising selecting packets 
according to a second selection criteria and encrypting the selected packets. 
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■ • 

16. A method of encrypting a digital television signal, comprising: 
examining unencrypted packets of data in the digital television signal to 

identify a predetermined packet type; 

encrypting packets identified as being of the predetermined packet type 
using a first encryption method to produce first encrypted packets; 

encrypting the packets identified as being of the predetermined packet type 
using a second encryption method to produce second encrypted packets; and 

replacing the unencrypted packets of the predetermined packet type with the 

* 

first encrypted packets and the second encrypted packets in the digital television 
signal to produce a partially dual encrypted television signal. 

♦ 

* 

17. The method according to claim 16, further comprising distributing the 
partially dual encrypted digital television signal. 

« 

18. The method according to claim 16 t wherein the predetermined packet type 
comprises a packet carrying information that is needed to decode the digital 
television signal. 

19. The method according to claim 17, wherein the television signal is 
compressed, and wherein the predetermined packet type comprises a packet 
carrying information that is needed to decompress the digital television signal. 

20. The method according to claim 1 7, wherein the predetermined packet type 
comprises packets carrying information needed to access the digital television 

■ 

signal. 

21. The method according to claim 17, wherein the digital television signal 
complies with an MPEG standard, and wherein the predetermined packet type 
comprises transport stream packets carrying a payload that comprises a 
packetized elementary stream (PES) header. 
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22. The method according to claim 17, wherein the digital television signal 
complies with the digital satellite service transport standard, and wherein the 
predetermined packet type comprises packets carrying a payload of a packetized 
elementary stream header. 

23. The method according to claim 17, wherein the predetermined packet type 
comprises video packets carrying a payload of a video sequence header. 

■ 

24. The method according to claim 1 7, wherein the predetermined packet type 
comprises video packets carrying a payload of a group of pictures header. 

« 

25. The method according to claim 1 7, wherein the predetermined packet type 
comprises video packets carrying a payload of closed captioning information. 

26. The method according to claim 1 7, further comprising assigning a packet 
identifier to the unencrypted packets. 

m 

27. The method according to claim 26, further comprising assigning the packet 
identifier to the first encrypted packets. 

28. The method according to claim 1 7, further comprising assigning a secondary 
packet identifier to the second encrypted packets. 

* « 

■ 

29. An electronic storage medium storing instructions which, when executed on 
a programmed processor, carry out the method of encrypting a digital television 
signal according to claim 17. 

* 

30. An electronic transmission medium carrying an encrypted digital television 
signal encrypted by the method according to claim 1 1 . 
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31 . A method of encrypting a digital television signal, comprising: 
examining packets of data in the digital television signal to identify a 

.predetermined packet type; 

encrypting packets identified as being of a predetermined packet type; and 
distributing the digital television signal with encrypted packets of the 
predetermined packet type along other packets that are unencrypted. 

32. The method according to claim 31, wherein the encrypting comprises 
encrypting packets identified as a packets that are needed to decode the digital 
television signal. 

33. The method according to claim 31, wherein the digital television signal is 
compressed, and wherein the predetermined packet type comprises a packet type 
that is needed to decompress the digital television signal. 

34. The method according to claim 33, wherein the digital television signal 
complies with an MPEG standard, and wherein the predetermined packet type is 
identified as transport stream packet carrying a payjoad that comprises a 
packetized elementary stream (PES) header. 

35. The method according to claim 31, wherein the digital television signal 
complies with the digital satellite service transport standard, and wherein the 
predetermined packet type comprises packets carrying a payload of a packetized 
elementary stream header. 

* 

36. The method according to claim 31 , wherein the predetermined packet type 
comprises video packets carrying a payload of a video sequence header. 

37. The method according to claim 31 , wherein the predetermined packet type 
comprises video packets carrying a payload of a. group of pictures header. 
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38. The method according to claim 31 , wherein the predetermined packet type 
comprises video packets carrying a payload of closed captioning information. 

39. The method according to claim 31, wherein the digital television signal 
complies with an MPEG standard, and wherein the predetermined packet type is 
identified as a packet containing MPEG l-picture packets. 

40. An electronic storage medium storing instructions which, when executed on 

i 

a programmed processor, carry out the method of encrypting a digital television 
signal according to claim 31 . 
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41 . An encrypted television program, comprising: 
a plurality of unencrypted packets; and 

a plurality of encrypted packets, wherein the encrypted packets contain 
information required to decode the television program. 

42. The encrypted television program according to claim 41, wherein the 

i 

unencrypted packets and encrypted packets comprise transport stream packets. 

■ 

43. The- encrypted television program according to claim 41, wherein the 
encrypted transport stream packets comprise packets containing MPEG packetized 
elementary stream (PES) headers. 

■ * 

44. The encrypted television program according to claim 41 , wherein the digital 
television program complies with the digital satellite service transport standard, and 
wherein the encrypted packets comprise packets carrying a payload of a 
packetized elementary stream header. 

# 

45. The encrypted television program according to claim 41, wherein the 
encrypted packets comprise video packets carrying a payload of a video sequence 
header. 

46. The encrypted television program according to claim 41, wherein the 
encrypted packets comprise video packets carrying a payload of a group of pictures 
header. 

47. The encrypted television program according to claim 41, wherein the 
encrypted packets comprise video packets carrying a payload of closed captioning 
information. 
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48. The encrypted television program according to claim 41 , wherein the digital 
television program is encoded according to an MPEG standard, and wherein the 
encrypted and unencrypted packets are identified by a packet identifier. 

* 

49. The encrypted television program according to claim 41 , wherein the digital 
television program is encoded according to an MPEG standard, and wherein the 
unencrypted packets are identified by a primary packet identifier, and wherein the 
encrypted packets are identified by a secondary packet identifier. 

* 

50. The method according to claim 41, wherein the television program is 

■ • * 

compressed, and wherein the predetermined packet type comprises a packet type 
that is required to decompressing the television program. 
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51 . A television set-top box, comprising: 

a receiver receiving a digital television signal comprising: 
a plurality of unencrypted packets; and 

a plurality of encrypted packets, wherein the encrypted packets 
contain information required to decode the digital television signal; 
a decrypter that decrypts the encrypted packets; and 
a decoder that decodes the unencrypted packets and the decrypted packets 
to produce a signal suitable for play on a television set. 

52. The apparatus according to claim 51 , wherein the unencrypted packets and 

■ 

encrypted packets comprise transport stream packets. 

♦ * 

53. The apparatus according to claim 51, wherein the encrypted transport 

* 

stream packets comprise packets containing MPEG packetized elementary stream 
(PES) headers. 

« 

54. The apparatus according to claim 51, wherein the digital television signal 
complies with an MPEG standard, and wherein the encrypted and unencrypted 
packets are identified by a packet identifier. 

55. The apparatus according to claim 51 , wherein the digital television signal 
complies with an MPEG standard, and wherein the unencrypted packets are 
identified by a primary packet identifier, and wherein the encrypted packets are 
identified by a secondary packet identifier. 

56. The apparatus according to claim 51 , wherein the digital television signal is 
compressed, and wherein the encrypted packets comprises a packet type that is 
needed to decompress the digital television signal. 
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57. The apparatus according to claim 56, further comprising decompressing 

« 

means for decompressing the compressed digital television signal. 

58. The apparatus according to claim 51 , wherein the digital television signal 
complies with the digital satellite service transport standard, and wherein the 
encrypted packets comprise packets carrying a pay load of a packetized elementary 
stream header. 

59. The apparatus according to claim 51, wherein the encrypted packets 
comprise video packets carrying a payload of a video sequence header. 

60. The apparatus according to claim 51, wherein the encrypted packets 
comprise video packets carrying a payload of a group of pictures header. 

61. The apparatus according to claim 51, wherein the encrypted packets 
comprise video packets carrying a payload of closed captioning information. 
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62. A method of decoding a partially encrypted television program, comprising: 

■ 

receiving a digital television program comprising a plurality of packets, 
wherein certain packets of the plurality of packets are encrypted and a remainder 
of the packets are unencrypted, wherein the encrypted packets contain information 
that is required for correct decoding of the television program; 

decrypting the encrypted packets to produce decrypted packets; and 
decoding the decrypted packets and the unencrypted packets to produce a 
decoded television signal.. 

9 

63. The method according to claim 62, wherein the partially encrypted television 
program is a digital television program, and wherein the certain encrypted packets 
comprise packets that are needed to decode the television program. 

64. The method according to claim 62, wherein the partially encrypted television 
program is compressed, and wherein the certain packets comprises packets 
carrying information that is needed to decompress the television program. 

65. The method according to claim 64, wherein the partially encrypted television 
program complies with an MPEG standard, and wherein the certain packets 
comprise transport stream packets carrying a payload that comprises a packetized 
elementary stream (PES) header. 

66. An electronic storage medium storing instructions which, when executed on 
a programmed processor, carry out the method of decrypting a television program 
according to claim 64. 

-67. The method according to claim 64, wherein the receiving, decrypting and 
decoding are carried out in a television device. 
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68! The method according to claim 67, wherein the television device comprises 
a television set-top box. 



69. The method according to claim 64, wherein the partially encrypted television 
program complies with the digital satellite service transport standard, and wherein 
the encrypted packets carry a payload of a packetized elementary stream header. 

» 

70. The method according to claim 64, wherein the encrypted packets comprise 
video packets carrying a payload of a video sequence header. 

71 . The method according to claim 64, wherein the encrypted packets comprise 
video packets carrying a payload of a group of pictures header. 

72. The method according to claim 64, wherein the encrypted packets comprise 
video packets carrying a payload of closed captioning information. 
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73. A method of decoding partially encrypted content, comprising: 
receiving partially encrypted content comprising unencrypted content, 

content encrypted under both a first encryption system and a second encryption 
system, the encrypted content comprising information needed for correct decoding 
of the partially encrypted content; and 

decrypting the encrypted content under the first encryption system to 
produce decrypted content. 

74. The method according to claim 73, further comprising decoding the 
unencrypted content and the decrypted content to decode the partially encrypted 
content. 

75. . The method according to claim 73* wherein the partially encrypted content 
comprises a digital television program, and wherein the encrypted content 
comprises packets that are needed for correct decoding the television program. 

76. The method according to claim 73, wherein the partially encrypted content 
comprises a digital television program, and wherein the digital television program 
is compressed, and wherein the encrypted content comprises packets carrying 

■ 

information that is needed to decompress the television program. 

77. The method according to claim 77, wherein the digital television program 
complies with an MPEG standard, and wherein the encrypted content comprises 
transport stream packets carrying a payload that comprises a packetized 
elementary stream (PES) header. 

78. The method according to claim 76, wherein the digital television signal 
complies with the digital satellite service transport standard, and wherein the 
encrypted packets carry a payload of a packetized elementary stream header. 
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79. The method according to claim 73, wherein the encrypted content comprises 
video packets carrying a payload of a video sequence header. 

80. The method according to claim 73, wherein the encrypted content comprises 
video packets carrying a payload of a group of pictures header. 

■ 

81 . The method according to claim 73, wherein the encrypted content comprises 

» 

video packets carrying a payload of closed captioning information. 

■ 

82. An electronic storage medium storing instructions which, when executed on 
a programmed processor, carry out the method of decoding according to claim 73. 

✓ -83. The method according to claim 73, wherein the receiving, decrypting and 

decoding are carried out in a television device. 

84. The method according to claim 73, wherein the television device comprises 
a television set-top box. 

85. The method according to claim 73, wherein the receiving, decrypting and 
decoding are carried out in an integrated circuit. 

86. The method according to claim 85, wherein the integrated circuit comprises 
one of an application specific integrated circuit and a field programmable gate 
array. 

87. The method according to claim 73, wherein the receiving, decrypting and 
decoding are carried out in a plurality of integrated circuits. 
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88. The method according to claim 87, wherein the plurality of integrated circuit 
comprises at least one of an application specific integrated circuit and a field 
programmable gate array. 
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89. A method of decoding a partially encrypted television program, comprising: 
receiving the partially encrypted television program comprising a plurality of 

clear packets, a plurality of packets encrypted under a first encryption algorithm, 
and a plurality of packets encrypted under a second encryption algorithm; 

wherein the packets encrypted under the first and second encryption 
algorithms are packets that are needed for proper decoding of the television 
program; 

decrypting the packets encrypted under the first encryption algorithm to 
produce decrypted packets; and 

decoding the decrypted packets and the clear packets. 

* 

90. The method according to claim 89, wherein the television program 
comprises a digital television program. 

91 . The method according to claim 89, wherein the partially encrypted television 
program is compressed, and wherein the encrypted packets comprises packets 
carrying information that is needed to decompress the television program. 

* 

■ 

92. The method according to claim 91,. wherein the program is encoded 
according to an MPEG standard, and wherein the encrypted packets comprise 
transport stream packets carrying a payload that comprises a packetized 
elementary stream (PES) header. 

93. The method according to claim 89, wherein the partially encrypted television 
program complies with the digital satellite service transport standard, and wherein 
the encrypted packets carry a payload of a packetized elementary stream header. 

94. The method according to claim 89, wherein the encrypted packets comprise 
video packets carrying a payload of a video sequence header. 
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95. The method according to claim 89, wherein the encrypted packets comprise 
video packets carrying a payload of a group of pictures header. 

96. The method according to claim 89, wherein the encrypted packets comprise 
video packets carrying a payload of closed captioning information. 

. 97. An electronic storage medium storing instructions which, when executed on 
a programmed processor, carry out the method of decoding a television signal 
according to claim 89. 

98. The method according to claim 89, wherein the receiving, decrypting and 
decoding are carried out in an integrated circuit. 

99. The method according to claim 98, wherein the integrated circuit comprises 
an application specific integrated circuit. 

100. The method according to claim 89, wherein the receiving, decrypting and 
decoding are carried out in a television device. 

1 01 . The method according to claim 1 00, wherein the television device comprises 
a television set-top box. 
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1 02. A method of decoding a partially encrypted television program, comprising: 
receiving the partially encrypted television program comprising a plurality of 

clear packets, a plurality of packets encrypted under a first encryption algorithm, 
and a plurality of packets encrypted under a second encryption algorithm; 

wherein the packets encrypted under the first and second encryption 
algorithms are packets that are needed to properly decode the television program; 

wherein the clear packets are identified by a first packet identifier; 

wherein the packets encrypted under the first encryption, algorithm are 

« 

identified by a second packet identifier (PID), and wherein the packets encrypted 

■ 

under the second encryption algorithm are identified by a third packet identifier 
(PID); and 

decrypting the packets encrypted under the first encryption algorithm to 
produce decrypted packets. 

103. The method according to claim 102, further comprising decoding the 
decrypted packets and the clear packets. 

104. The method according to claim 102, wherein the partially encrypted 
television program comprises a digital partially encrypted television program. 

105. The method according to claim 102, wherein the partially encrypted 
television program is compressed, and wherein the encrypted packets comprise 
packets carrying information that is needed to decompress the television program. 

106. The method according to claim 102, wherein the partially encrypted 
television program complies with an MPEG standard, and wherein the encrypted 
packets comprise transport stream packets carrying a payload that comprises a 
packetized elementary stream (PES) header. 
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107. The method according to claim 102, wherein the partially encrypted 
television program complies with the digital satellite service transport standard, and 
wherein the encrypted packets carry a payload of a packetized elementary stream 
header. 

108. The method according to claim 102, wherein the encrypted packets 
comprise video packets carrying a payload of a video sequence header. 

109. The method according to claim 102, wherein the encrypted packets 
comprise video packets carrying a payload of a group of pictures header. 

110. The method according to claim 102, wherein the encrypted packets 
comprise video packets carrying a payload of closed captioning information. 

111. An electronic storage medium storing instructions which, when executed on 
a programmed processor, carry out the method of decoding according to claim 1 02. 

■ 

■ 

112. The method according to claim 102, wherein the receiving, decrypting and 
decoding are carried out in an integrated circuit. 

1 1 3. The method according to claim 1 1 2, wherein the integrated circuit comprises 
one of an application specific integrated circuit and a field programmable gate 
array. 

1 14. The method according to claim 1 03, wherein the receiving, decrypting and 
decoding are carried out in a television device. 

1 1 5. The method according to claim 1 1 4, wherein the television device comprises 
a television set-top box. 

■ 
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116. A method of encrypting a packetized stream of information, comprising: 
examining packets of data in the stream of information to identify a 

predetermined packet type, wherein the predetermined packet type is needed to 
decode the data stream; and 

encrypting packets identified as being of a predetermined packet type. 

* 

117. The method according to claim 116, wherein the stream of information 
represents a television program and wherein the encrypting comprises encrypting 
packets identified as a packets that are needed to decode the television program. 

118. The method according to claim 116, wherein the television program is 
compressed, and wherein the predetermined packet type comprises a packet type 
that is needed to decompress the television program. 

119. The method according to claim 116, wherein the television program 
complies with an MPEG standard, and wherein the predetermined packet type is 
identified as transport stream packet carrying a payload that comprises a 
packetized elementary stream (PES) header. 

120. The method according to claim 116, wherein the television program 
complies with an MPEG standard, and wherein the predetermined packet type is 
identified as a packet containing MPEG l-picture packets. 

121. The method according to claim 116, wherein the television program 
complies with the digital satellite service transport standard, and wherein the 
predetermined packet type comprises packets carrying a payload of a packetized 

* 

elementary stream header. 

1 22. the method according to claim 1 1 6, wherein the predetermined packet type 
comprises video packets carrying a payload of a video sequence header. 
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1 23. The method according to claim 116, wherein the predetermined packet type 
comprises video packets carrying a payload of a group of pictures header. 

1 24. The method according to claim 116, wherein the predetermined packet type 

* 

comprises video packets carrying a payload of closed captioning information. 

1 25. An electronic storage medium storing instructions which, when executed on 
a programmed processor, carry out the method of encrypting a digital television 
signal according to claim 116. 
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126. A method of manipulating packetized digital content, comprising: 
examining unencrypted packets to identify a predetermined packet type; 
duplicating the packets identified as being of the predetermined packet type 

to produce first and second duplicate packets; and 

inserting the first and second duplicate packets into the digital content to 
produce partially duplicated content having first and second duplicate packets 
instead of the identified packets. 

127. The method according to claim 126, further comprising identifying the first 
duplicate packets in the partially duplicated content and encrypting the first 
duplicate packets to produce first encrypted duplicate packets. 

128. The method according to claim 127, further comprising inserting the first 
encrypted duplicated packets into the digital content in place of the first duplicate 

■ 

packets to produce partially encrypted content. 

129. The method according to claim 128, further comprising identifying the 
second duplicate packets and encrypting the second duplicate packets to produce 
second encrypted duplicate packets. 

» 

1 30. The method according to claim 1 29, further comprising inserting the second 

* 

encrypted duplicate packets into the digital content in place of the second duplicate 
packets to produce partially dual encrypted content. 
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131. A method of manipulating packetized digital content, comprising: . ~ 
examining unencrypted packets to identify a predetermined packet type; 
duplicating the packets identified as being of the predetermined packet type 

to produce first and second duplicate packets; 

encrypting the first and second duplicate packets; and 

inserting the first and second encrypted packets into the digital content to 

produce partially encrypted content 

* 

1 32. The method according to claim 1 31 , wherein the first and second duplicate 
packets are encrypted under first and second encryption algorithms. 
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133. A method of manipulating packetized digital content, comprising: 

examining unencrypted packets to identify a predetermined packet type; 
duplicating the packets identified as being of the predetermined packet type 

to produce first and second duplicate packets; 
encrypting the first duplicate packets; and 

inserting the encrypted first duplicate packets into the digital content to 
produce partially encrypted content. 
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134. A method of allowing multiple conditional access providers in a content 

■ 

delivery system, comprising: 

examining unencrypted packets of content to identify packets of a 
predetermined type; 

encrypting packets of the predetermined type using a first encryption method 
used by a first conditional access provider to produce first encrypted packets; 

encrypting packets of the predetermined type using a second encryption 
method used by a second conditional access provider to produce second encrypted 

« 

packets; 

replacing the packets of the predetermined type with the first and second 
encrypted packets to produce partially dual encrypted content; and 

distributing the partially dual encrypted content in the content delivery 
system. 

135. The method according to claim 134, further comprising combining 
entitlement control messages for the first and second conditional access provider 
with the partially encrypted content. 
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AMENDED CLAIMS 

[received by the international bureau on 12 May 2003 (12.05.03); claims 19 to 26, 28 to 30, 43, 50, 62 to 
66, 69, 77, 84, 99 and 1 1 8 to 125 replaced by amended claims beating the same numbers; 

claims 1 to 18, 27, 31 to 42, 44 to 49, 5 1 to 61, 67 to 68, 70 to 76, 78 to 83, 85 to 98, 100 to 

117 and 126 to 135 remain unchanged. Accordingly, Applicant submits substitute pages 55, 
56, 59, 60, 63 to 66, 69, 72 and 73 tor originally filed pages 55, 56, 59, 60, 63-66, 69, 72 and 
73 to reflect the amendments to claims 19 to 26, 28 to 30, 43, 50, 62 to 66, 69, 77, 84, 99 and 

118 to 125 (11 pages)] 

1 16. A method of encrypting a digital television signal, comprising: 

2 examining unencrypted packets of data in the digital television signal to 

3 identify a predetermined packet type; 

4 encrypting packets Identified as being of the predetermined packet type using 

5 a first encryption method to produce firet encrypted packets; 

6 encrypting the packets identified as being of the predetermined packet type 

7 using a second encryption method to produce second encrypted packets; and 

8 replacing the unencrypted packets of the predetermined packet type with the 

9 first encrypted packets and the second encrypted packets in the digital television 
10 signal to produce a partially dual encrypted television signal, 

11 

12 17. The method according to claim 1 6, further comprising distributing the partially 

13 dual encrypted digital television signal. 
14 

15 18. The method according to claim 1 6, wherein the predetermined packet type 

16 comprises a packet carrying information that is needed to decode the digital 

17 television signal. 
18 

19 19. The method according to claim 16, wherein the television signal is 

20 compressed, and wherein the predetermined packet type comprises a packet 

21 carrying information that is needed to decompress the digital television signal. 
22 

23 20. The method according to claim 1 6, wherein the predetermined packet type 

24 comprises packets carrying information needed to access the digital television 

25 signal. 
26 

27 21 . The method according to claim 1 6, wherein the digital television signal 

28 complies with an MPEG standard, and wherein the predetermined packet type 

29 comprises transport stream packets carrying a payload that comprises a packetized 

30 elementary stream (PES) header. 
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1 22. The method according to claim 16, wherein the digital television signal 

2 complies with the digital satellite service transport standard, and wherein the 

3 predetermined packet type comprises packets carrying a payload of a packetized 

4 elementary stream header. 
5 

6 23. The method according to claim 1 6, wherein the predetermined packet type 

7 comprises video packets carrying a payload of a video sequence header 
8 

9 24. The method according to claim 1 6, wherein the predetermined packet type 

10 comprises video packets carrying a payload of a group of pictures header. 
1J 

12 25. The method according to claim 1 6, wherein the predetermined packet type 

13 comprises video packets carrying a payload of closed captioning information. 
14 

15 26. The method according to claim 16, further comprising assigning a packet 

16 identifier to the unencrypted packets. 

17 

18 27. The method according to claim 26, further comprising assigning the packet 

1 9 identifier to the first encrypted packets. 
20 

21 28. The method according to claim 16, further comprising assigning a secondary 

22 packet Identifier to the second encrypted packets. 
23 

24 29. An electronic storage medium storing instructions which, when executed on a 

25 programmed processor, carry out the method of encrypting a digital television signal 

26 according to claim 1 6. 
27 

28 30. An electronic transmission medium carrying an encrypted digital television 

29 signal encrypted by the method according to claim 16. 
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1 41 . An encrypted television program, comprising: 

2 a plurality of unencrypted packets; and 

3 a plurality of encrypted packets, wherein the encrypted packets contain 

4 information required to decode the television program. 
5 

6 42. The encrypted television program according to claim 41, wherein the 

7 unencrypted packets and encrypted packets comprise transport stream packets. 
8 

9 43. The encrypted television program according to claim 42, wherein the 

10 encrypted transport stream packets comprise packets containing MPEG packetized 

1 1 elementary stream (PES) headers. 
12 

13 44. The encrypted television program according to claim 41 , wherein the digital 

14 television program complies with the digital satellite service transport standard, and 

15 wherein the encrypted packets comprise packets carrying a payload of a packetized 

1 6 elementary stream header. 
17 

18 45. The encrypted television program according to claim 41 , wherein the 

19 encrypted packets comprise video packets carrying a payload of a video sequence 

20 header. 

21 

a 

22 46. The encrypted television program according to daim 41 , wherein the 

23 encrypted packets comprise video packets carrying a payload of a group of pictures 

24 header. 
25 

26 47. The encrypted television program according to claim 41 , wherein the 

27 encrypted packets comprise video packets carrying a payload of closed captioning 

28 information. 
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1 48. The encrypted television program according to claim 41 , wherein the digital 

2 television program is encoded according to an MPEG standard, and wherein the 

3 encrypted and unencrypted packets are identified by a packet identifier. 

4 

5 49. The encrypted television program according to claim 41 f wherein the digital 

6 television program is encoded according to an MPEG standard, and wherein the 

7 unencrypted packets are identified by a primary packet identifier, and wherein the 

8 encrypted packets are identified by a secondary packet identifier. 
9 

10 50. The method according to claim 41 , wherein the television program is 

1 1 compressed, and wherein the encrypted packets comprise a packet type that is 

12 required to decompress the television program. 
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1 



3 
4 
5 



62. A method of decoding a partially encrypted television signal, comprising: 
2 receiving a digital television signal comprising a plurality of packets, wherein 

certain packets of the plurality of packets are encrypted and a remainder of the 
packets are unencrypted, wherein the encrypted packets contain information that is 
required for correct decoding of the television signal; 

6 decrypting the encrypted packets to produce decrypted packets; and 

7 decoding the decrypted packets and the unencrypted packets to produce a 

8 decoded television signal. 
9 

10 63. The method according to claim 62, wherein the partially encrypted television 

1 1 signal is a digital television signal, and wherein the certain encrypted packets 

12 comprise packets that are needed to decode the television signal. 
13 

14 

15 



64. The method according to daim 62, wherein the partially encrypted television 
signal is compressed, and wherein the certain packets comprises packets carrying 
1 6 information that is needed to decompress the television signal. 
17 



18 
19 
20 



65. The method according to claim 64, wherein the partially encrypted television 
signal complies with an MPEG standard, and wherein the certain packets comprise 
transport stream packets carrying a payioad that comprises a packetized elementary 
21 stream (PES) header. 

22 

23 66. An electronic storage medium storing instructions which, when executed on a 

24 programmed processor, carry out the method of decrypting a television signal 

25 according to daim 64. 
26 

27 67. The method according to daim 64, wherein the receiving, decrypting and 

28 decoding are carried out in a television device. 
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1 68. The method according to claim 67, wherein the television device comprises a 

2 television set-top box. 
3 

4 69. The method according to claim 64, wherein the partially encrypted television 

5 signal complies with the digital satellite service transport standard, and wherein the 

6 encrypted packets carry a payload of a packetized elementary stream header. 
7 

8 70. The method according to daim 64, wherein the encrypted packets comprise 

9 video packets carrying a payload of a video sequence header. 

10 

11 71 . The method according to claim 64, wherein the encrypted packets comprise 

12 video packets carrying a payload of a group of pictures header. 
13 

14 72. The method according to claim 64, wherein the encrypted packets comprise 

15 video packets carrying a payload of closed captioning information. 
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1 73. A method of decoding partially encrypted content, comprising: 

2 receiving partially encrypted content comprising unencrypted content, content 

3 encrypted under both a first encryption system and a second encryption system, the 

4 encrypted content comprising information needed for correct decoding of the partially 

5 encrypted content and 

6 decrypting the encrypted content under the first encryption system to produce 

7 decrypted content 
8 

9 74. The method according to claim 73, further comprising decoding the 

10 unencrypted content and the decrypted content to decode the partially encrypted 

11 content. 
12 

13 75. The method according to claim 73, wherein the partially encrypted content 

14 comprises a digital television program, and wherein the encrypted content comprises 

1 5 packets that are needed for correct decoding the television program. 
16 

17 76. The method according to claim 73, wherein the partially encrypted content 

18 comprises a digital television program, and wherein the digital television program is 

19 compressed, and wherein the encrypted content comprises packets carrying 

20 information that is needed to decompress the television program, 
21 

22 77. The method according to claim 76, wherein the digital television program 

23 complies with an MPEG standard, and wherein the encrypted content comprises 

24 transport stream packets carrying a payload that comprises a packetlzed elementary 

25 stream (PES) header. 
26 

27 78. The method according to claim 76, wherein the digital television signal 

28 complies with the digital satellite service transport standard, and wherein the 

29 encrypted packets carry a payload of a packetized elementary stream header. 
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1 79. The method according to claim 73, wherein the encrypted content comprises 

2 video packets carrying a payload of a video sequence header. 
3 

4 80. The method according to claim 73, wherein the encrypted content comprises 

5 video packets carrying a payload of a group of pictures header. 
6 

7 81 . The method according to claim 73, wherein the encrypted content comprises 

8 video packets carrying a payload of closed captioning Information. 

9 

10 82. An electronic storage medium storing instructions which, when executed on a 

1 1 programmed processor, carry out the method of decoding accoiding to claim 73. 

12 

1 3 83. The method according to claim 73, wherein the receiving, decrypting and 

14 decoding are carried out in a television device. 
15 

16 84. The method according to claim 83, wherein the television device comprises a 

17 television set-top box. 

18 

s 

19 85. The method according to claim 73. wherein the receiving, decrypting and 

20 decoding are carried out in an integrated circuit. 
21 

22 86. The method according to claim 85, wherein the integrated circuit comprises 

23 one of an application specific integrated circuit and a field programmable gate array 

24 

25 87. The method according to claim 73, wherein the receiving, decrypting and 

26 decoding are carried out in a plurality of integrated circuits. 
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1 95. The method according to claim 89, wherein the encrypted packets comprise 

2 video packets carrying a payload of a group of pictures header. 
3 

4 96. The method according to claim 89, wherein the encrypted packets comprise 

5 video packets carrying a payload of closed captioning information. 
6 

7 97. An electronic storage medium storing instructions which, when executed on a 

8 programmed processor, carry out the method of decoding a television signal 

9 according to claim 89. 
10 

11 98. The method according to daim 89, wherein the receiving, decrypting and 

12 decoding are carried out in an integrated circuit. 
13 

14 99. The method according to claim 98, wherein the integrated circuit comprises 

1 5 one of an application specific integrated circuit and a field programmable gate array. 
16 

17 1 00. The method according to claim 89, wherein the receiving, decrypting and 

1 8 decoding are earned out in a television device. 
19 

20 101. The method according to daim 1 00, wherein the television device comprises 

2 1 a television set-top box. 
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116. A method of encrypting a packetized stream of information, comprising: 
examining packets of data in the stream of information to identify a 

3 predetermined packet type, wherein the predetermined packet type is needed to 

4 decode the data stream; and 

encrypting packets identified as being of a predetermined packet type. 



5 
6 



7 1 1 7. The method according to claim 1 1 6, wherein the stream of information 

8 represents a television program and wherein the encrypting comprises encrypting 
packets Identified as a packets that are needed to decode the television program. 



0 
1 



118. The method according to claim 1 1 7, wherein the television program is 
compressed, and wherein the predetermined packet type comprises a packet type 
that is needed to decompress the television program. 

* 

119. The method according to claim 1 1 7, wherein the television program complies 

6 with an MPEG standard, and wherein the predetermined packet type is identified as 

7 transport stream packet carrying a payload that comprises a packetized elementary 

8 stream (PES) header. 
9 

1 20. The method according to claim 1 1 7. wherein the television program complies 
with an MPEG standard, and wherein the predetermined packet type is identified as 

22 a packet containing MPEG l-picture packets. 

23 



20 
21 



24 
25 
26 



121 . The method according to daim 1 17, wherein the television program complies 
with the digital satellite service transport standard, and wherein the predetermined 
packet type comprises packets carrying a payload of a packetized elementary 
27 stream header. 



28 

29 
30 
31 



1 22. The method according to claim 1 1 7, wherein the predetermined packet type 
comprises video packets carrying a payload of a video sequence header. 
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1 1 23, The method according to claim 1 1 7, wherein the predetermined packet type 

2 comprises video packets carrying a payload of a group of pictures header. 
3 

4 124. The method according to claim 117, wherein the predetermined packet type 

5 comprises video packets carrying a payload of closed captioning information. 
6 

7 1 25. An electronic storage medium storing instructions which, when executed on a 

8 programmed processor, carry out the method of encrypting a packetized stream of 

9 information according to daim 1 1 6. 
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